AGENT API Authentication: Bearer and ApiKey - Aria Compute

Aria Compute’s AGENT API supports two header-based authentication schemes. Authentication is enforced only when AGENT_CLOUD_API_KEY is set at server boot. When it is unset, endpoints are open and do not require an Authorization header.

Supported schemes

You can use either Bearer or ApiKey in the Authorization header. Both accept the same API key value.

Scheme 1: Bearer

curl https://agent.example.com/v1/agents \
  -H "Authorization: Bearer <api_key>"

Scheme 2: ApiKey

curl https://agent.example.com/v1/agents \
  -H "Authorization: ApiKey <key>"

In both examples, replace <api_key> with your self-serve API key.

Self-serve API keys

Generate and rotate keys by calling the /v1/api-keys endpoints. You can create multiple keys and revoke them independently.

Error response

If the key is missing or invalid when auth is required, the API returns a 401 with:

{
  "error": "Unauthorized"
}