Authentication

Every request authenticates with a project API key. Create one per environment and store it in ALLOWKIT_API_KEY — never commit it to source control.

curl https://api.useallowkit.xyz/v1/agents/researchbot-01/budget \
  -H "Authorization: Bearer $ALLOWKIT_API_KEY"

Key scopes

Keys are scoped to a single project. Rotate them anytime from the dashboard — old keys keep working for a short grace window so deploys don’t break.