API keys

Your personal API key authenticates AI agents and integrations as you. There is exactly one key per account.

Create a key

1. Open Settings → API key.
2. Click Create. The plaintext key (starting with aago_) is shown once — copy it immediately.
3. Only a one-way hash is stored; Aago can never show the key again.

Use a key

Send it as a bearer token:

curl -H "Authorization: Bearer aago_..." https://aago.social/api/mcp

Everything the key touches is scoped to your documents — agents can't see anyone else's data.

Rotate

Clicking Rotate issues a new key and immediately revokes the old one. Update every client (Claude Code, Codex, Opencode, scripts) right after rotating, or they'll start failing.

Delete

Deleting the key revokes all agent and integration access at once. The app itself keeps working — only key-based access stops.

If a key leaks

Rotate it immediately, then email hello@aago.social from your account address so we can check for misuse.