API keys & members
Roles, invites, server-side API keys.
API keys
An API key is a secret for your backend server to call the
platform directly — used for
server-to-server calls to /v2/chat, not
for embedding in a browser or a mobile app (use a publishable key for
that, see Integration). A key carries full access
to your organization's agents.
Create a key on the API keys page: the full value is shown once, right after creation — only its first 8 characters are stored for you to recognize it later, so if you lose it, create a new key and revoke the old one. A revoked key stays listed for audit; it just can't call the API anymore.
Members & roles
Every person belongs to exactly one organization. Two roles:
- Owner — can do everything, including inviting/removing members and changing other members' roles.
- Admin — manages agents, knowledge bases, tools, and can view runs/conversations/usage; can't manage other members.
Invite a member by email from the Members page (only owners see this button). The invitee gets an email to set a password for their first sign-in; if the email fails to send (a bad address, say), the member is still added to the organization and you can resend the invite. An owner can change a member's role or remove them at any time.