Authentication

Create API keys, scopes, and authentication headers.

API access is included on Pro, Team, and Enterprise. Create a key in Settings > API Keys.

Scopes

• Read — retrieve Monitors, Runs, models, usage, and compatibility resources
• Read-write — also create Monitors, ingest traffic, and start Runs or Prompt CI

Key handling

Keys begin with plm_live_ followed by 32 base58 characters. The secret is shown once. PeerLM stores its SHA-256 hash, and an expired or revoked key immediately returns 401.

Headers

X-API-Key: plm_live_...

# or
Authorization: Bearer plm_live_...

A key is bound to one workspace. Supplying another workspace's resource ID does not cross that boundary.