Concepts
API key
Secure every API call to deployed assistants using your Amarsia API key.
Overview
API key is required for any Amarsia API usage. Your application sends it in the x-api-key header to authenticate requests.
No key means no access, so key handling is a core part of production readiness.
Where to create keys
From there you can create, copy, and revoke keys.
Request header
x-api-key: YOUR_API_KEYKey management basics
- Keep keys on your backend or secure server environment.
- Never hardcode keys in public frontend code.
- Revoke and rotate keys if exposure is suspected.
- Use separate keys by environment when possible.
Treat API keys like production credentials. If a key leaks, rotate it immediately.