> ## Documentation Index
> Fetch the complete documentation index at: https://wiredesk.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate to the Wiredesk API with a workspace API key sent as a bearer token. Full access and read-only keys, and when a key stops working.

Make a key under **Developers → API keys** in the dashboard. Only owners and admins see the Developers section. Send the key in the `Authorization` header:

```bash theme={null}
curl https://wiredesk.ai/api/v1/agents \
  -H "Authorization: Bearer wd_3f9a…"
```

A missing, malformed or revoked key gets `401 unauthorized`.

## API keys

* A key is `wd_` and 48 hex characters. It is shown once, when you make it. Wiredesk keeps only a hash, so a lost key cannot be shown again. Revoke it and make a new one.
* A key acts for the whole workspace. It can do what an admin can, except billing and the team.
* **Full access** keys can read and change. **Read only** keys can read everything and get `403 read_only_key` for any change.
* A key works only while the person who made it is still an owner or admin of the workspace. If they leave, or are made an agent, their keys stop working. The keys list marks them **Not working**.
* **Revoke** stops a key on its next request.
* Changes made with a key appear in the activity log under the person who made it, with the key's name.
* Make one key for each tool that connects, so you can revoke one without breaking the others.

Keep keys on your server. A key in a web page or a mobile app can be copied, and the API does not send CORS headers, so browsers cannot call it.

## Requests without a key

Starting an [agent-first onboarding](https://wiredesk.ai/docs/developers/agent-onboarding.md) is the one request that takes no key. It answers with a key that works for that trial's agent only, until the agent is claimed or the trial expires a week later.

## Related

* [Conventions](https://wiredesk.ai/docs/api-reference/conventions.md)
* [Request logs](https://wiredesk.ai/docs/developers/logs.md)
* [MCP server](https://wiredesk.ai/docs/developers/mcp.md), which takes the same keys


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.