aik_…) authenticates a script, CI job, or MCP client as you — no
browser session needed. It acts with your own permissions: whatever you can see
and do in the app, a key you create can too.
Create one
Go to app.atako.ai → Settings → API keys (admin-only) and click Create key. The full key is shown once — copy it immediately and store it somewhere safe (a password manager or secrets store, not a shared doc). See Settings → API keys for the click-through steps.Use it
Pass the key as a Bearer token on any authenticated Atako API request:Security
- Treat a key like a password — anyone who has it can act as you.
- Revoke a key from Settings → API keys the moment you stop using it (e.g. you rotate a script, or a laptop with a key in its config is lost). Revoking is immediate and can’t be undone.
- A key has no separate permission scope in this release: it inherits everything its owning user’s account can do, including every agent, integration, and billing action they can perform in the app. Don’t share a key across people or systems that shouldn’t have the same access as you.