API keys and authentication

Use the Shard API to start automations, read run results, and manage workflows from your own code.

Create an API key

1. Open Settings → API keys.

2. Choose Create key and give it a name.

3. Pick the permissions it needs, like start runs or read run history.

4. Copy the key. You'll only see it once.

Authenticate requests

Send your key as a bearer token in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Keep keys safe

• Store keys in a secrets manager, not in your code.

• Use a separate key for each service.

• Revoke any key you think has been exposed.

Tip: give each key the smallest set of permissions it needs.