Dashboard
API keys
Create, label, rotate and revoke the API keys that connect SDKs, the API and the browser extension to an AI system.
An API key authenticates calls for exactly one AI system. Keys start with sk_live_. Manage them on the system's Integration tab (admins only).
Create a key
Open Integration
Open the AI system and select Integration.
Fill in the key details
- Environment: Prod, Staging or Dev. Use separate keys per environment.
- Key Owner / Label (required): who or what uses the key, for example
billing-serviceorsales@company.com.
Generate and copy
Click Generate Key. Copy the System ID and the API key from Copy this key now. The full key is shown only once; AgentID stores a hash and the prefix.
Store the key in an environment variable or a secret manager:
AGENTID_API_KEY=sk_live_...
AGENTID_SYSTEM_ID=00000000-0000-0000-0000-000000000000Never put the key in browser code or a mobile app. For the browser extension, prefer enrollment tokens, which wrap a dedicated key.
Active Keys
The Active Keys list shows every key with its name, Prefix, Owner, environment, status (Active or Revoked) and Last used time.
| Action | Effect |
|---|---|
| Revoke key | Immediately invalidates the key and removes it from the system |
| Delete key | Permanently removes a revoked key record |
| Revoke all | Revokes every active key of the system |
To rotate a key: create a new key, deploy it, confirm traffic in the activity log, then revoke the old key. Revoke a key immediately if it may have been exposed.
Attribution
Every event records which key was used (name, prefix, owner label, environment), so you can tell traffic apart in the activity log. For the browser extension you can create one key per department or per user; see Rollout with Chrome policy.
Using the key
Send the key in the x-agentid-api-key header (preferred) or as Authorization: Bearer. See Authentication.