Authentication
Create an organization API key and send it with every Stardeck API request
API Keys
All API requests require an org-level API key. Create and manage keys in your organization's Settings → API Keys tab. The tab shows only in developer mode.
Each key is assigned a role that determines its permissions. The key inherits all permissions of its assigned role.
Using Your Key
Pass the key in the Authorization header with a Bearer prefix:
curl https://www.stardeck.ai/api/v1/knowledge \
-H "Authorization: Bearer sk-org-your-key-here"Key Security
- Keys are shown once at creation time. Store them securely.
- Use environment variables — never hardcode keys in source code.
- Assign the minimum role needed for your use case.
- Revoke keys immediately if compromised.
Error Responses
| Status | Meaning |
|---|---|
401 | Missing Authorization header, a key that doesn't start with sk-org-, or a revoked key |
403 | The key's role lacks the permission, the role was deleted, or the organization is paused |
Next steps
List Knowledge Items
Make your first call with the key