> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aiybiz.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys

> Create a programmatic API key to authenticate scripts, CI, and MCP clients.

An API key (`aik_…`) authenticates a script, CI job, or MCP client as you — no
browser session needed. It acts with your own permissions: whatever you can see
and do in the app, a key you create can too.

## Create one

Go to [app.atako.ai](https://app.atako.ai) → **Settings → API keys** (admin-only)
and click **Create key**. The full key is shown **once** — copy it immediately and
store it somewhere safe (a password manager or secrets store, not a shared doc).
See [Settings → API keys](/guides/settings#api-keys) for the click-through steps.

## Use it

Pass the key as a Bearer token on any authenticated Atako API request:

```bash theme={null}
curl https://api.atako.ai/agents \
  -H "Authorization: Bearer aik_..."
```

This is the same header the [Atako MCP server](/developers/mcp/overview) uses — see
its [quickstart](/developers/mcp/quickstart) for ready-to-paste configs for Claude
Code, Claude Desktop, Cursor, and ChatGPT developer mode.

## Security

* Treat a key like a password — anyone who has it can act as you.
* Revoke a key from **Settings → API keys** the moment you stop using it (e.g. you
  rotate a script, or a laptop with a key in its config is lost). Revoking is
  immediate and can't be undone.
* A key has no separate permission scope in this release: it inherits everything
  its owning user's account can do, including every agent, integration, and billing
  action they can perform in the app. Don't share a key across people or systems
  that shouldn't have the same access as you.