​

Authentication

Authorization: Bearer ${STATESET_API_KEY}

​

API keys

• Test keys (sk_test_) for sandbox development
• Live keys (sk_live_) for production

​

Using your key

curl https://api.stateset.com/v1/agents \
  -H "Authorization: Bearer ${STATESET_API_KEY}" \
  -H "Content-Type: application/json"

import { StateSetClient } from 'stateset-node';

const client = new StateSetClient({
  apiKey: process.env.STATESET_API_KEY
});

const agents = await client.agents.list();

import os
from stateset import StateSetClient

client = StateSetClient(api_key=os.getenv("STATESET_API_KEY"))
agents = client.agents.list()

​

Troubleshooting

• 401 Unauthorized: missing/invalid key or wrong environment.
• 403 Forbidden: key lacks required permissions.

​

Rotating a key

1. Create the replacement key in the dashboard.
2. Deploy it to the one consumer that used the old key.
3. Revoke the old key and watch for 401s — anything that breaks was sharing it.

​

Failed authentication

​

Related

• Overview — base URL and conventions
• Agents — the resource most requests target
• Public API