Merchant API key
Create a Merchant API key under Business profile → Developers → API Keys.
GET /v1/me returns the key’s orgId, apiKeyId, and permissions. Merchant API keys are server-side credentials.
Agent Wallet Key
An Agent Wallet Key is a P-256 signing bundle created for one agent wallet:
The CLI signs each Agent Wallet API request. Advanced direct clients send:
The signature covers the SHA-256 digest of:
Prefer the CLI unless you specifically need to implement this protocol.
Telemetry key
Agent Traces API keys authorize SDK export to the collector. Store them in environment variables or a secrets manager and redact them from spans.
Never expose any secret in browser code, public source, model prompts, traces, screenshots, or support messages. Rotate a key immediately if its value may have leaked.
