Overview
API Keys
Section titled “API Keys”Long-lived bearer tokens for server-to-server use. Hashed at rest, shown in plaintext once at creation. Authenticate with Authorization: Bearer aik_… (the same header shape as a user JWT — the server routes any aik_-prefixed token to the API-key authenticator). Minting requires the Organization plan or higher and team-owner role; listing + revoking stay open on every tier so an owner can audit and clean up after a downgrade. Rotate by minting a new key and revoking the old one.