What do the API key permission presets include?
| Preset | Permissions | Good for |
|---|---|---|
| Agent API (default) | runs:write, runs:read | Starting and following Cosmos Agent runs |
| Model API | models:invoke | Calling SuperCosmos with an OpenAI SDK |
| Code Buckets | buckets:read, buckets:write, backups:write | Uploading, downloading and backing up files |
| Read only | runs:read, account:read, buckets:read | Dashboards and monitoring |
| Full access | All seven permissions | Personal experiments only |
If the permissions you tick don't match a preset exactly, the dialog shows Custom.
Choosing well#
Pick the smallest preset that does the job. A leaked read-only key can't start runs or spend credits on models; a leaked full-access key can do everything a key can do.
Good to know#
- Each key has its own rate limit: 10, 30 (default), 60 or 120 requests per minute.
- Keys can expire after 30 days, 90 days (default), 1 year, or never.
Learn more#
Still need help?#
- General support: support@clatterlabs.com or team@clatterlabs.xyz
- Infrastructure questions, or permanent deletion of your data (your whole account or one service): infrastructure@clatterlabs.xyz
We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Related articles
Still need help?
Tried the steps above and still stuck? Email us. We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Infrastructure questions, or permanent deletion of your data
infrastructure@clatterlabs.xyzFor deleting your whole account or the data of one service.