Authentication
How to authenticate with the AgentRecall API.
API Keys
API keys are the primary way to authenticate. Get yours from the dashboard.
- Go to dashboard.agentrecall.cloud
- Sign in with your account
- Navigate to Settings > API Keys
- Click "Generate New Key"
- Copy the key (starts with
ark_live_)
Warning: API keys are shown only once. Store them securely.
JWT Tokens
For agent-to-agent communication, JWT tokens provide short-lived, scoped access.
# Exchange API key for JWT
curl -X POST https://api.agentrecall.cloud/v1/auth/token \
-H "Authorization: Bearer ark_live_xxxx" \
-d '{"expires_in": 3600}'JWT tokens expire after the specified duration (default: 1 hour).
Agent vs Human Auth
Agent Auth
- API key stored in environment variable
- Scoped to specific agent ID
- Auto-renewed JWT tokens
- Rate-limited per agent
Human Auth
- OAuth or email/password login
- Full access to all agents
- Dashboard and API access
- Can manage billing and settings
Security Best Practices
- ✓Never commit API keys to source control
- ✓Use environment variables for keys
- ✓Rotate keys periodically
- ✓Use least-privilege scoped keys
- ✓Monitor API usage in the dashboard