Skip to Content
Dashboard GuideAPI Keys

API Keys

API keys authenticate SDK requests to your Maestrio project. They are organization-scoped — a single key works for all projects in the organization.

Creating a key

  1. Go to Settings → API
  2. Click Create API Key
  3. Copy the full key immediately — it is only shown once

Keys are prefixed with mst_ followed by a short visible prefix (e.g. mst_abc123...). After creation, only the prefix is displayed in the dashboard.

Using a key

Pass the API key when initializing the SDK:

const maestrio = createMaestrio({
  apiKey: "mst_live_abc123...",
  baseUrl: "https://app.maestrio.ai",
  projectId: "your-project-id",
});

The key is sent as an X-API-Key header on every request to the Maestrio API.

Revoking a key

  1. Go to Settings → API
  2. Click the revoke/delete action next to the key
  3. Confirm the revocation

Revoked keys immediately stop working. Any SDK instances using a revoked key will receive ApiError responses.

Security considerations

  • Never expose API keys in public repositories or client-side code without configuring allowed domains.
  • Since the SDK runs in the browser, your API key is visible in network requests. The allowed domains list acts as a safeguard — only requests from approved origins are accepted.
  • Rotate keys regularly and revoke any that may have been compromised.
  • Use separate keys for development and production if needed.

Next steps

ProjectsAllowed Domains