API keys

• Every request sends Authorization: Bearer <key>.
• A key is shown once when you create it. We only store a hash.
• Up to 10 active keys per workspace. Revoke any key instantly.
• Keep keys on your server. Never ship them in a browser or app.

curl https://kreatorflow.ai/v1/models \
  -H "Authorization: Bearer $KREATORFLOW_API_KEY"

Store it as KREATORFLOW_API_KEY. Keys work with the REST API and the MCP server.