Application API Keys

Create a key

Open Dashboard -> Applications, select an application, and create an API key. The full key is shown once. Store it in your secret manager or environment variables immediately.

Use a key

Send the key as a bearer token:

Authorization: Bearer or_xxxxxxxxxxxxxxxxxxxxx

SDK constructors also accept the key directly:

const client = new Fallbakit({ apiKey });

Rotate a key

1. Create a new key for the same application.
2. Deploy the new key to your app.
3. Confirm traffic appears in the dashboard.
4. Revoke the old key.

Revoked keys are rejected immediately by the API.