Authentication - AgentX

AgentX uses two authentication mechanisms depending on the caller.

API key: SDK and CI pipelines

SDK routes (submitting traces, running CI evaluations) use an API key passed in the x-api-key header.

x-api-key: a1b2c3d4e5f60718293a4b5c6d7e8f9012345678

Get your key from Settings → API Keys in the dashboard. Python SDK: pass it at initialization or set the environment variable:

from agentx import AgentX

# Explicit
client = AgentX(api_key="a1b2c3d4e5f60718293a4b5c6d7e8f9012345678")

# From environment (AGENTX_API_KEY)
client = AgentX.from_env()

export AGENTX_API_KEY=a1b2c3d4e5f60718293a4b5c6d7e8f9012345678

Session: browser UI routes

Routes called by the AgentX frontend (GET /ingest/traces, tracked-agent management) use the session cookie set by the login flow. No extra header is required when calling from the browser.

Which routes use which

Route	Auth
`POST /api/v1/ingest/traces`	API key
`POST /api/v1/ingest/traces/:id/evaluate`	API key
`POST /api/v1/ingest/ci-runs`	API key
`POST /api/v1/ingest/ci-runs/:id/results`	API key
`POST /api/v1/ingest/ci-runs/:id/finalize`	API key
`GET /api/v1/ingest/ci-runs/:id`	API key
`GET /api/v1/ingest/datasets/:id/test-cases`	API key
`GET /api/v1/ingest/traces`	Session
`GET/PUT/DELETE /api/v1/ingest/tracked-agents`	Session