Skip to content
Runbear Docs

API keys

Create and manage the keys that authenticate calls to the Runbear API.

On this page
Creating a keyRevokingRelated

A Runbear API key authenticates requests to the REST API as your organization. Every endpoint outside the browser SDK's session flow expects one as a bearer token.

Creating a key#

Open Settings and select API Keys, then Create API key. Name it after the system that will use it, such as Acme Corp integration, so an unfamiliar key in a log can be traced back to its owner.

The key is shown once. Store it in your secret manager immediately.

Revoking#

Revoking a key takes effect immediately and cannot be undone. Requests using it begin failing with 401, so rotate the consumer first when replacing a key that is in use.

  • Web SDK — embed an agent without exposing a key
  • MCP server — manage agents from an AI client, authenticated by OAuth rather than a key
  • Traces API