Skip to main content
The Timbal API uses API keys to authenticate requests. You can create and manage your API keys by navigating to Profile → API Keys in the dashboard. API keys are personal to your user account and inherit all your permissions across organizations. Each key carries the same privileges as your user account, so be sure to keep them secure! Do not share your API keys in publicly accessible areas such as GitHub, client-side code, and so forth.
Important: For security, we do not store your API keys after creation. Make sure to copy and store them in a secure location immediately—you will not be able to recover them later.
When using the Timbal framework, you can set these environment variables for automatic authentication:
The framework uses these values for platform requests. TIMBAL_API_HOST is a hostname, without https:// or a path; the request helper adds HTTPS. Set both values before creating the run context. Some operations also need TIMBAL_ORG_ID, TIMBAL_KB_ID, or explicit resource IDs.
All API requests must be made over HTTPS. Calls made over plain HTTP will fail. API requests without authentication will also fail.