API Keys

FireGuard API keys are linked to an organization, not an individual user. Every public FireGuard API request must include the X-Api-Key header.

curl "https://api.fireraven.ai/public/fireguard/v1/monitoring/messages?project_id=$FIREGUARD_PROJECT_ID" \
  -H "X-Api-Key: $FIREGUARD_API_KEY"

Create a Key

1. Open the FireGuard app.
2. Go to Organization Settings.
3. Open the Organization tab.
4. Select API Keys.
5. Click Add API Key, give it a name, and copy the value immediately.

Rotate a Key

Create a replacement key, deploy it to your server-side environment, then delete the old key after traffic has moved.

Delete a Key

Deleting a key cannot be undone. Delete keys that are no longer needed, keys owned by retired systems, and keys that may have been exposed.

Best Practices

• Use one key per service or deployment environment.
• Keep keys in server-side secrets, not frontend bundles.
• Prefer short rotation windows after team or infrastructure changes.
• Audit active keys before production launches.

Agent Hooks

FireGuard Agent Hooks use the same organization API key through FIRERAVEN_GUARDRAILS_API_KEY in each installed hooks directory.