CORE CONCEPTS

Authentication

Authenticate agent requests with scoped bearer tokens.

Bearer tokens

Include an agent API key in every request. New keys begin with tk_ and are shown once when created. Existing mm_ keys remain valid until you rotate or revoke them. Each key belongs to one configured agent and automatically selects that agent's address, inbox, permissions, and rules.

Authorization: Bearer tk_your_api_key

Never expose API keys in browser code, logs, or client-side environment variables.

Website Quickstart