Skip to main content
An API key (aik_…) authenticates a script, CI job, or MCP client as you — no browser session needed. It acts with your own permissions: whatever you can see and do in the app, a key you create can too.

Create one

Go to app.atako.aiSettings → API keys (admin-only) and click Create key. The full key is shown once — copy it immediately and store it somewhere safe (a password manager or secrets store, not a shared doc). See Settings → API keys for the click-through steps.

Use it

Pass the key as a Bearer token on any authenticated Atako API request:
This is the same header the Atako MCP server uses — see its quickstart for ready-to-paste configs for Claude Code, Claude Desktop, Cursor, and ChatGPT developer mode.

Security

  • Treat a key like a password — anyone who has it can act as you.
  • Revoke a key from Settings → API keys the moment you stop using it (e.g. you rotate a script, or a laptop with a key in its config is lost). Revoking is immediate and can’t be undone.
  • A key has no separate permission scope in this release: it inherits everything its owning user’s account can do, including every agent, integration, and billing action they can perform in the app. Don’t share a key across people or systems that shouldn’t have the same access as you.