What does each API key permission allow?
| Permission | Product | Allows |
|---|---|---|
runs:write | Agent API | Create and cancel runs |
runs:read | Agent API | Read runs, their events and results |
account:read | Account | Read your credit balance and usage (GET /v1/account) |
models:invoke | Model API | Call models (POST /v1/chat/completions) |
buckets:read | Code Buckets | List and read projects, buckets and files |
buckets:write | Code Buckets | Create, change and delete projects, buckets and files |
backups:write | Code Buckets | Create and restore backups |
A request that needs a permission the key doesn't have answers 403 insufficient_scope. You can't add permissions to an existing key; create a new key with the permissions you need and revoke the old one.
In the keys list, the Access column shows each key's permissions as product chips, like Agent API, Model API, Code Buckets or Account · read. Hover over the chips to see the exact permissions.
Learn more#
Still need help?#
- General support: support@clatterlabs.com or team@clatterlabs.xyz
- Infrastructure questions, or permanent deletion of your data (your whole account or one service): infrastructure@clatterlabs.xyz
We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Related articles
Still need help?
Tried the steps above and still stuck? Email us. We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Infrastructure questions, or permanent deletion of your data
infrastructure@clatterlabs.xyzFor deleting your whole account or the data of one service.