Skip to main content
Create a key in the console under API keys. A key is shown once, when you create it: store it as SPIRAL_API_KEY and never commit it. Send it on every request:
A missing or invalid key answers 401 UNAUTHENTICATED. The key decides the organization, its workspace, and the key’s own spend cap and rate limits. GET /v1/me shows what the key can do. The MCP server takes the same keys, as the same bearer token.