Authentication
All API requests require a Runcrate API key passed as a Bearer token.Getting Your API Key
Your key looks like:
rc_live_xxxxxxxxxxxxxxxx
Using Your Key
Include the key in theAuthorization header:
Key Management
From the API Keys tab you can:- View keys — See the key prefix and status (the full key is never shown again)
- Activate/Deactivate — Toggle a key without deleting it
- Delete — Permanently remove a key
- Track usage — See the last-used date for each key
Auto-Provisioned Keys
When you open a model in the Playground, Runcrate automatically creates a default API key for your project if one doesn’t exist. This key is used for playground requests.Security Best Practices
- Store keys in environment variables, not in code
- Never commit keys to git — add
.envto.gitignore - Use separate keys for development and production
- Rotate keys periodically
- Deactivate compromised keys immediately