Skip to main content
All API requests require a Bearer token in the Authorization header.

Creating an API key

  1. Go to Settings → API Keys
  2. Click New Key, give it a name, and choose a permission level
  3. Copy the key: it’s only shown once
Store your API key in an environment variable or secrets manager: never commit it to source control. Keys are prefixed with pf_ so they’re easy to detect in accidental leaks.

Permission levels

Use read_only keys for trusted agent or server integrations that do not need to upload. Do not expose an API key in browser code or other untrusted clients. See API keys for the full object reference and plan limits.

Revoking a key

Revoke a key immediately from the API Keys dashboard if it’s compromised: requests using it will be rejected within seconds.