Skip to main content
Gloo AI Studio provides a secure and straightforward interface for managing the API keys used to authenticate with the Gloo AI API. This guide will walk you through creating keys and using them in your applications.

Generating an API Key

Follow these steps to create a new API key:
  1. Navigate to API Keys: From the main Studio sidebar, click on “API Keys”.
  2. Know the permissions: Any member of your organization can create an API key. Only organization Admins can delete or revoke keys. If you need a key removed, ask an org admin.
  3. Create the key: Click the “Create New Key” button. Enter a name for the key and click “Create”. Studio will generate a new API key.
    Treat your API key like a password! It will only be shown once — copy it immediately and store it in a secure location. After creation, only the obfuscated value (e.g., sk_...3456) is displayed in Studio.
  4. Use the key in API calls: Once you have your key, send it directly in the Authorization header:
    Your API key is sent directly as a bearer token.

Key Lifecycle

  • Revocation: Revoked keys stop working within 60 seconds. Use this for compromised or unused keys.
  • Deactivation: Temporarily disable a key without deleting it.
  • Activation: Re-enable a previously deactivated key.
Existing Client ID / Client Secret credentials are being deprecated and will be sunset by December 2026. They continue to work during the transition period. To migrate, create a new API key above and update your applications to use it directly (no token exchange needed). See the Authentication Tutorial for details.
GlooCode continues to use Client ID / Client Secret credentials however — it is not yet compatible with API keys. If you use GlooCode, keep your existing Client ID / Client Secret credentials active even during the migration period. See the GlooCode installation guide for setup instructions.