API Keys
All requests require an API key.Header Authentication
SDK Authentication
Environment Variables
Set your API key as an environment variable:API Key Format
| Prefix | Type |
|---|---|
qwed_ | Standard API key |
qwed_test_ | Test/sandbox key |
qwed_agent_ | Agent token |
Security Best Practices
- Never commit API keys to version control
- Use environment variables in production
- Rotate keys regularly using the dashboard
- Set IP allowlists for production keys
- Use test keys for development
Agent Authentication
For AI agent tokens:Scopes
API keys can have restricted scopes:| Scope | Access |
|---|---|
verify:read | Verification endpoints |
agent:write | Agent management |
attestation:read | Attestation queries |
admin:all | Full access |