Skip to main content
All REST endpoints except /health require an API key.

​
cURL

​
Key handling

  • Store keys in environment variables or a secret manager.
  • Do not place keys in prompts, browser pages, issue trackers, or source control.
  • Do not expose keys to untrusted agents.

​
CLI storage

web login stores the API key for CLI and MCP use:
SDK and REST code should use WEBCOMPUTE_API_KEY or an explicit secret source.