Authentication

Every request is authenticated with an API key sent as a Bearer token.

Get a key

Sign in at agentled.co.
Open the Account tab.
Under API keys, create a key and give it a label.
Copy the key — it starts with agl_live_ and is shown once. Store it somewhere safe.

The key is shown only at creation time. If you lose it, revoke it and create a new one. Revoking takes effect immediately.

Add an Authorization header to every request:

curl https://agentled.co/api/v1/plan \
  -H "Authorization: Bearer agl_live_your_key_here"

A missing, malformed, or revoked key returns 401:

{ "error": { "code": "unauthorized", "message": "Missing or invalid API key." } }

Keys grant full access to your account’s brands and prompts — treat them like passwords.
Use them server-side only. Never ship a key in a browser, mobile app, or public repo.
Rotate by creating a new key and revoking the old one.

A key is tied to your account, not a single brand. It can read and manage every brand your account belongs to, up to your plan’s limits.