Get started
Manage API keys
Create, rotate, and revoke keys from the Console.
Key types
- sk_test_ — sandbox key, safe for local dev and CI.
- sk_live_ — production key, server-side only.
- sk_readonly_ — read-only key for observability / dashboards.
Creating a key
Open Console → API Keys → New Key. Give it a name, choose the scope, and copy the value. You will only see it once.
Using a key
bash`curl https://api.xobriq.com/v1/guard/score -H "Authorization: Bearer $XOBRIQ_KEY"`
Rotation
We recommend rotating production keys every 90 days. When you rotate, both the old and new key stay valid for 24h so you can roll out safely.
Leaked keys
If a key is ever exposed (e.g. committed to git), rotate it immediately from the Console. All requests using the old key will be denied.