Authentication

Send your API key in the Authorization header:

Authorization: Bearer agt_live_...

Personal Pro keys use the agt_live_ prefix. Team organization service keys use agt_team_.

Where keys are created

• Personal Pro: Dashboard → Settings → API Access
• Team: Team settings → API keys (service keys for automation)

Keys are shown in full only once at creation and stored as secure hashes. Revoked keys immediately return 401 on subsequent requests.

CLI authentication

Set environment variables:

export FOOGUARD_API_KEY=agt_live_...
export FOOGUARD_API_URL=https://fooguard.com

The CLI sends the same Bearer header to the analyze endpoint.

Legacy environment variables

During migration from AgentGuard branding, these remain supported:

• AGENTGUARD_API_KEY — used when FOOGUARD_API_KEY is unset
• AGENTGUARD_API_URL — used when FOOGUARD_API_URL is unset

If both Foo Guard and legacy variables are set, Foo Guard names take precedence.