API keys
Platform API keys authenticate everything that talks to Orizon programmatically — the public API, the CLI, and the MCP server your coding agent uses.
Create a key
Go to dashboard.orizon.ng/api-keys and create a key. Keys are scoped to your organization and look like orz_pk_…. The full secret is shown once at creation — copy it then; only a short prefix is stored afterward.
Scopes
- read — GET requests only. Good for dashboards, monitoring, or letting an agent inspect without changing anything.
- full — read plus write (create projects, deploy, set env, and more).
Use a key
Send the key as a Bearer token:
curl https://api.orizon.ng/api/v1/projects \
-H "Authorization: Bearer orz_pk_your_key_here"With the CLI, log in once:
orizon login --key orz_pk_your_key_hereIn CI or for an agent, set ORIZON_API_KEY in the environment instead of running login.
Rotate and revokeTreat keys like passwords. Revoke any key from the dashboard the moment it's no longer needed or may have leaked, and create a fresh one. The public API is rate-limited to 20 requests/second per key.