API keys

A key authenticates the account API server-to-server — send it asAuthorization: Bearer sk_live_…. Treat it like a password: it grants access to your agents. Keys can’t manage other keys, and never touch admin actions.