sk-4ai-... is the only credential used to access the 4AICode relay and must be included with every request.
Creating a Token
Go to Dashboard → Manage Tokens → New Token, enter a name, and click Create.
⚠️ The token is displayed only once. Copy it to a password manager such as 1Password or Bitwarden immediately. Once you close the dialog, it cannot be recovered—you can only revoke it and create a new one. Do not paste it into chat windows or commit it to git.
Usage
Use the Authorization: Bearer header:
Authorization: Bearer sk-4ai-xxxxxxxxxxxxxxxx
URL query parameters (?api_key=...) and the X-Api-Key header are not supported because they can easily be exposed in HTTP logs.
Team Isolation
A token can access only the team under which it was created:
- Switch teams → create a new token
- Usage is always billed to the team that owns the token
There is no single token that can access all teams.
Revoking a Token
Click Revoke on the Manage Tokens page. Revocation is irreversible and takes effect immediately—all requests will return 401 within 1 second. After revocation, you can create a new token with the same name.
When to Revoke a Token
| Scenario | Revoke? |
|---|---|
| Pasted into a public repo, group chat, or screenshot | ✅ Immediately |
| Stored on a former employee's development machine | ✅ Immediately |
| Scheduled rotation (every 90 days recommended) | ✅ |
| Switching laptops | ❌ Reuse it directly |
| Suspected compromise | ✅ Revoke first |
Error Codes
| Status Code | Meaning |
|---|---|
| 401 | Token is missing, malformed, or revoked |
| 403 | The team has been suspended by an administrator |
| 429 | Rate limit or quota exceeded. See Rate Limits / Quotas for details. |
FAQ
Q: How many tokens can I have? A: There is no hard limit. We recommend using one token per device so that you can revoke access for an individual device.
Q: Can one token be used with both Claude and GPT-5? A: Yes. Tokens are tied to teams, not models.