Amarsia
Concepts

API key

Secure every API call to deployed assistants using your Amarsia API key.

Overview

API key is required for any Amarsia API usage. Your application sends it in the x-api-key header to authenticate requests.

No key means no access, so key handling is a core part of production readiness.

Where to create keys

From there you can create, copy, and revoke keys.

Request header

x-api-key: YOUR_API_KEY

Key management basics

  • Keep keys on your backend or secure server environment.
  • Never hardcode keys in public frontend code.
  • Revoke and rotate keys if exposure is suspected.
  • Use separate keys by environment when possible.

Treat API keys like production credentials. If a key leaks, rotate it immediately.