Skip to main content
Artifacta authenticates via API key. Every request — CLI, SDK, and REST API — requires a valid key.

Get your API key

  1. Sign up at app.artifacta.io/signup
  2. Complete onboarding — a key is auto-generated for you
  3. Or create additional keys at app.artifacta.io/dashboard/keys
Your full API key is shown once at creation time. Copy it immediately. You cannot retrieve it later — only the last 4 characters are visible after creation.

Key format

Example: ak_live_x9f7v3m1p0q2r4s6t8u0w1y3z5a7b9c2

Authenticate the CLI

Priority order: ARTIFACTA_API_KEY env var > config file.

Authenticate the Python SDK

Authenticate the REST API

Every API request requires the Authorization: Bearer <key> header.

Verify authentication

Output
Or in Python:

Key limits

Revoked keys don’t count toward the limit. Revoke unused keys at app.artifacta.io/dashboard/keys.

Security notes

  • Keys are hashed (SHA-256) before storage — Artifacta never stores your full key
  • A revoked key is immediately unusable
  • Keys do not expire — revoke manually when no longer needed
  • All keys have full tenant access (no per-key permission scopes in V1)