Skip to main content

​
Key types

Get your keys at app.imarobot.ai/settings/api-keys.

​
Usage

Pass your key as a Bearer token in the Authorization header:

​
Key security

  • API keys are stored as SHA-256 hashes — they cannot be recovered if lost
  • The full key is shown exactly once at creation time
  • If you lose a key, revoke it and create a new one
  • Never commit keys to source control — use environment variables

​
Publishable keys

Publishable keys (pk_live_) can only call GET /v1/verify/:token. They’re safe to include in receiver-side code because they cannot register agents, issue tokens, or access any management endpoints.