Skip to main content

​
API keys

​
What this lets you do

Authenticate server-side requests and separate deterministic testing from paid managed execution.

​
What you need

  • A DreamLayer account at platform.dreamlayer.io
  • Access to a server-side environment or secret manager

​
Steps

​
1. Choose a mode

  • dlr_test_... uses the deterministic no-cost contract.
  • dlr_live_... uses paid managed execution.

​
2. Create and store the key

Create the key in the developer console. The full secret is shown once. Enter it without writing it to shell history:
Never place a key in browser JavaScript, a mobile binary, a URL, a prompt, source control, screenshots, or support messages.

​
3. Revoke a key

Revocation is immediate for new requests. Existing durable execution state remains available only according to the authenticated account contract. Each beta tester must use an individual key. Shared keys prevent safe attribution and revocation.

​
Confirm it worked

An authenticated capabilities request succeeds. After revocation, the same key receives 401 on a new request.

​
Common errors

  • A lost full secret cannot be displayed again. Revoke it and create a new key.
  • A test key does not call a provider or consume credits.
  • A live key without an available credit receives 402 before execution.

​
Troubleshooting

Check that the key is present only in the server process and that its dlr_test_ or dlr_live_ mode matches the intended request.

​
Next steps