> For the complete documentation index, see [llms.txt](https://shinkalabs.gitbook.io/hub/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shinkalabs.gitbook.io/hub/andromeda/getting-started/api-key.md).

# Get an API key

Authenticated endpoints need an API key. Public endpoints (`/capabilities`, `/openapi.json`, `/v1/pricing`) do not.

## Create one

1. Sign up at <https://app.andromedainfra.pro/signup>.
2. In the dashboard, create an API key.
3. Copy the raw key immediately. It is shown **once**. Only a SHA-256 hash is stored, so it cannot be shown again. If you lose it, create a new one and delete the old one.

## Scopes

Each key carries one or more scopes. A request is rejected if the key lacks the scope the route requires.

| Scope          | Allows                                                                        |
| -------------- | ----------------------------------------------------------------------------- |
| `read`         | `GET`s and read-only `POST`s (challenges, previews, status, ciphertext reads) |
| `write`        | Signing, prepares, submits, the Encrypt surface, MCP tool calls               |
| `admin`        | Webhooks, audit-log queries, policy templates, future-sign triggers           |
| `*` (wildcard) | Everything above                                                              |

Give each integration the narrowest scope it needs. A signing service rarely needs `admin`.

## IP allowlist

A key can be restricted to a set of CIDR ranges. Requests from outside the allowlist are rejected before anything else runs. Leave it empty to allow any source IP.

## Using the key

Send it on every authenticated request:

```bash
curl https://api.andromedainfra.pro/v1/pricing/estimate \
  -H "X-Api-Key: $ANDROMEDA_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "operations": ["ika.sign.submit"] }'
```

Keep it server-side. Do not embed it in a browser bundle or a mobile app. If a key leaks, delete it in the dashboard; deletion takes effect immediately.

## Rotating keys

Create the new key, deploy it, then delete the old one. There is no forced expiry, so rotate on your own schedule.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://shinkalabs.gitbook.io/hub/andromeda/getting-started/api-key.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.