> ## Documentation Index
> Fetch the complete documentation index at: https://docs.andiai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate with the Andi AI Search API using API keys in the x-api-key header.

Every request to the Andi AI Search API must include an API key in the `x-api-key` header. The same key authenticates every access path: REST requests, the [Andi CLI](/getting-started/cli), and the [MCP server](/resources/ai-agents).

<CodeGroup>
  ```bash curl theme={null}
  curl "https://api.andiai.com/api/v1/search?q=test" \
    -H "x-api-key: YOUR_API_KEY"
  ```

  ```python Python theme={null}
  headers = {"x-api-key": "YOUR_API_KEY"}
  ```

  ```javascript JavaScript theme={null}
  const headers = { "x-api-key": "YOUR_API_KEY" };
  ```
</CodeGroup>

## Getting an API key

1. Sign in to the [API Console](https://console.andiai.com)
2. Go to **API Keys**
3. Click **Create Key**
4. Copy the key — it's only shown once

## Setting up your environment

Store your API key as an environment variable rather than hardcoding it in your code.

<AccordionGroup>
  <Accordion title="Local development">
    Create a `.env` file in your project root:

    ```bash theme={null}
    ANDI_API_KEY=your-api-key
    ```

    Load it in your code:

    ```python theme={null}
    # Python (with python-dotenv)
    from dotenv import load_dotenv
    load_dotenv()

    import os
    api_key = os.environ["ANDI_API_KEY"]
    ```

    ```javascript theme={null}
    // JavaScript (with dotenv)
    import "dotenv/config";

    const apiKey = process.env.ANDI_API_KEY;
    ```

    Or export directly in your shell:

    ```bash theme={null}
    export ANDI_API_KEY="your-api-key"
    ```
  </Accordion>

  <Accordion title="Docker">
    Pass the key as an environment variable:

    ```bash theme={null}
    docker run -e ANDI_API_KEY=your-api-key your-image
    ```

    Or use an env file:

    ```bash theme={null}
    docker run --env-file .env your-image
    ```
  </Accordion>

  <Accordion title="CI/CD (GitHub Actions)">
    Add `ANDI_API_KEY` as a repository secret, then reference it in your workflow:

    ```yaml theme={null}
    steps:
      - name: Run search
        env:
          ANDI_API_KEY: ${{ secrets.ANDI_API_KEY }}
        run: ./search-script.sh
    ```
  </Accordion>

  <Accordion title="Vercel / Netlify">
    Add `ANDI_API_KEY` in your project's environment variables settings. These are automatically available as `process.env.ANDI_API_KEY` in your server-side code.
  </Accordion>
</AccordionGroup>

## Managing keys

The API Console lets you:

* **Create** multiple keys for different applications or environments
* **Rename** keys to identify their purpose
* **Enable/disable** keys without deleting them
* **Revoke** keys that are no longer needed

Each key tracks its own usage. You can monitor request counts and credit consumption per key in the console.

<Tip>
  Use separate API keys for development and production. This makes it easy to rotate keys, track usage per environment, and revoke a compromised key without affecting other environments.
</Tip>

## Security practices

<Warning>
  Treat API keys like passwords. Never commit them to version control or expose them in client-side code.
</Warning>

* Store keys in environment variables or a secrets manager
* Use separate keys for development and production
* Rotate keys periodically
* Revoke keys immediately if compromised
* Restrict key access to team members who need it
* Add `.env` to your `.gitignore`

## Next steps

<CardGroup cols={2}>
  <Card title="Search modes" icon="gauge-high" href="/search/search-modes">
    Automatic effort by default, manual control when you want it.
  </Card>

  <Card title="Build with AI agents" icon="robot" href="/resources/ai-agents">
    Use your key with the MCP server and agent tools.
  </Card>

  <Card title="API Console" icon="terminal" href="https://console.andiai.com">
    Manage your API keys, monitor usage, and configure rate limits.
  </Card>

  <Card title="Error handling" icon="triangle-exclamation" href="/resources/error-handling">
    Handle authentication errors and other failures.
  </Card>
</CardGroup>