# API Keys

## Create a key

1. Open **Settings > Developer & API**.
2. Enter a connection name and optionally select an expiry date.
3. Create the API key.
4. Copy it immediately.

The full key is shown only once. An account can keep up to five active API keys.
Revoke an unused key before creating another when the limit has been reached.

## Use the key

Send the key as a bearer token:

```text
Authorization: Bearer mem_sk_example_key
```

Do not place API keys in URLs.

## Environment variables

Windows PowerShell:

```powershell
$env:MEMSIDE_API_KEY = "mem_sk_example_key"
```

macOS or Linux:

```bash
export MEMSIDE_API_KEY="mem_sk_example_key"
```

## Test

```bash
curl https://api.memside.com/context/startup \
  -H "Authorization: Bearer $MEMSIDE_API_KEY"
```

## Safety

- Do not commit API keys to source control.
- Do not paste keys into screenshots, logs, or shared chats.
- Use separate keys for separate tools when practical.
- Revoke a key when it is no longer needed.
- Revoke and replace a key immediately if it is exposed.

## Access boundaries

API keys can use supported public routes. Account management, billing, private
files, and other app-only features are not general API-key routes.

Secret Memories are not available through API-key or normal MCP access.

## Next steps

- [JavaScript SDK](/developers/javascript-sdk/)
- [Python SDK](/developers/python-sdk/)
- [REST API](/developers/api-reference/)