Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.uselayer.ai/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

Layer API keys authenticate your application’s requests to the Layer AI platform. Every request to Layer requires a valid API key in the Authorization header.

​
Key Format

Layer API keys follow this format: 
layer_9e1417ca5c9b793875f12b6cf3185b9d...
All keys start with the layer_ prefix followed by 64 hex characters.

​
Creating a Key

​
From the Dashboard

  1. Go to Dashboard → API Keys
  2. Click Create New Key
  3. Enter a name for the key (e.g., “Production”, “Development”, “CI/CD”)
  4. Click Create
The full key is shown only once after creation. Copy it immediately and store it securely. You won’t be able to see the full key again.
After creation, only a masked prefix is displayed in the dashboard (e.g., layer_9e14...).

​
Using a Key

Include your API key in the Authorization header of every request: 
import { Layer } from '@layer-ai/sdk';

const layer = new Layer({
  apiKey: process.env.LAYER_API_KEY
});

​
Managing Keys

​
Multiple Keys

You can create multiple API keys for different environments or services. Each key has independent access to all your gates and resources.

​
Revoking a Key

To revoke a key, click the Delete button next to it in the dashboard. Revoked keys immediately stop working — any application using that key will receive authentication errors.

​
Last Used Tracking

The dashboard shows when each key was last used, helping you identify unused keys that should be cleaned up.

​
Security Best Practices

  • Never commit API keys to source control. Use environment variables or a secrets manager.
  • Use separate keys for development, staging, and production environments.
  • Rotate keys periodically. Create a new key, update your application, then revoke the old one.
  • Revoke unused keys. If a key hasn’t been used recently, consider deleting it.

​
API Keys vs Provider Keys

Layer API KeysProvider Keys (BYOK)
PurposeAuthenticate with Layer AIRoute through your own provider account
Formatlayer_...Provider-specific (e.g., sk-proj-...)
CountMultiple allowedOne per provider
Affects billingUses your Layer plan quotaCharges appear on your provider account
For more on provider keys, see Bring Your Own Keys.