API Keys
Frozen surface (dashboard UI)
The dedicated API Keys page in the cloud dashboard is currently frozen by an explicit product decision (2026-07-14, see docs/FROZEN_SURFACES.md in the repository): the sidebar entry is hidden and /api-keys redirects to /dashboard. The API key backend, existing keys, and the REST API described below remain live and retained, but no new API key UI feature work is planned until the freeze is lifted. Manage API keys via the REST API surface or contact support.
Cloud Only
API keys are available in the Cloud version only.
API keys let you access ADHDev's REST API from external services, scripts, or integrations.
Creating an API Key
- Go to API Keys in the sidebar
- Click Create API Key
- Enter a descriptive name
- Copy the key — it won't be shown again!
API keys are prefixed with adk_ for easy identification.
Using API Keys
Include the key in the Authorization header:
curl -H "Authorization: Bearer adk_your_key_here" \
https://api.adhf.dev/api/v1/daemonsAvailable Endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET | /api/v1/daemons | List connected machines |
| GET | /api/v1/daemons/{daemonId}/status | Read the current machine snapshot |
| POST | /api/v1/shortcuts/{daemonId}/launch | Launch an IDE, CLI, or ACP target |
| POST | /api/v1/shortcuts/{ideId}/chat | Send a message to an agent |
| POST | /api/v1/shortcuts/{ideId}/approve | Approve or reject an action |
| GET | /api/v1/shortcuts/{ideId}/chat | Read current chat |
| GET/POST | /api/v1/shortcuts/{ideId}/chat/debug | Build a sanitized chat debug bundle |
| GET | /api/v1/shortcuts/{ideId}/status | Read current agent status |
See the full API Reference →
Plan Limits
| Plan | API Keys | Monthly API Calls |
|---|---|---|
| Free | 3 | 1,000 |
| Pro | 10 | 50,000 |
| Ultra | 30 | 500,000 |
| Enterprise | Unlimited | Unlimited |
You can view your current usage at Account → Account tab → Plan limits.
Security
- Keys are hashed before storage — we can't retrieve your key
- Revoke keys anytime from the API Keys page
- Each key can be scoped to specific permissions
- API keys are for cloud automation against your own machines and sessions, not for bypassing account-security checks on sensitive settings changes
- Creating or revoking a key is a recent-login protected action in the cloud dashboard, so stale browser sessions may need re-authentication before the change succeeds