Get an API key

Mint a key in the dashboard: Dashboard → API keys → Create key. The secret (arc_live_…) is shown once — copy it immediately; only a hash is stored.

Use it as a bearer token on any /v1/* request:

Authorization: Bearer arc_live_xxxxxxxxxxxxxxxxxxxxxxxx

Keys are long-lived, scoped to your account, and revocable from the dashboard. Unlike a browser session they are CSRF-exempt (they can't ride an ambient cookie), so they're ideal for scripts and CI. Revoking a key blocks it instantly.