Authentication

Every Developer API request authenticates with a ClawLink API key. Keys start with the prefix cllk_live_.

Get an API key

1. Open the ClawLink dashboard.
2. Go to Settings → API Keys.
3. Create a key and copy it.

Send the key

Pass the key on every request using either of these headers:

curl https://claw-link.dev/api/agent/whoami \
  -H "Authorization: Bearer cllk_live_YOUR_KEY"

If both are present, x-clawlink-api-key wins. Either form works on every endpoint in this section.

Verify a key

GET /api/agent/whoami is the cheapest way to confirm a key is valid and see which account it belongs to:

curl https://claw-link.dev/api/agent/whoami \
  -H "Authorization: Bearer cllk_live_YOUR_KEY"

{
  "user_id": "usr_123",
  "workspace_id": "usr_123",
  "workspace_name": "you@example.com",
  "environment": "production",
  "region": "global",
  "capabilities": { "can_execute": true, "can_begin_connection": true }
}

Unauthorized responses

A missing or invalid key returns 401:

{ "error": "Unauthorized" }

This is also what you get if the key was revoked. Create a fresh key in Settings → API Keys and retry.