Authentication

All Agent API requests require an API key.

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

Use the same header for submit, task status, result, and file endpoints.

API-key limits

API-key controls apply identically to REST, MCP, and CLI requests. A key may have:

These controls are independent of the account’s available credits. A request can therefore be rejected even when the account has sufficient balance.

{
  "code": 401,
  "error": {
    "message": "Invalid or missing API key",
    "type": "unauthorized"
  }
}

An IP allowlist rejection returns 403. Rate or credit-window limits return 429; see Errors for retry guidance.