Authentication

Send your API key as a Bearer token in the Authorization header. Keys start with sk-sable_ and are shown in plaintext exactly once at creation time — store them in a secret manager immediately.

Authorization: Bearer sk-sable_yT4S...

Key storage

Sable stores only an Argon2id hash of your key, plus the first 20 characters of the prefix for UI labeling. If you lose the plaintext, revoke and create a new one — there's no way to recover it.

Dashboard sessions

The dashboard itself uses Sign-In With Ethereum (EIP-4361) rather than API keys. The bearer session it mints is scoped to your wallet and lives in sessions — completely separate from the sk-sable_… keys you mint for your agents.