API keys
All requests to api.framelane.io/v1/* must include an Authorization header:
Authorization: Bearer fl_live_kT9uQw...
You can create and manage API keys in the console under Settings → API Keys.
API keys are shown only once at creation time. Store them in a secret manager (e.g. AWS Secrets Manager, GCP Secret Manager, or a .env file excluded from version control).
Scopes
All API keys have full workspace access. Scoped keys with read-only or task-specific access are on the roadmap.
Rotating keys
- Create a new key in the console.
- Update your application to use the new key.
- Revoke the old key via
DELETE /v1/api-keys/{key_id}.
Error responses
An invalid or missing API key returns:
{
"error": {
"code": "unauthorized",
"message": "Missing Authorization header."
}
}
Status code: 401 Unauthorized.