API keys - Hermai

Creating a key

Sign in at hermai.ai/dashboard
Go to API Keys
Click Create key, give it a label
Copy the key. It is shown once and cannot be retrieved later.

Keys look like: hm_sk_abc123...

Using a key

Pass it as a Bearer token in the Authorization header:

curl -sS -X POST "https://api.hermai.ai/v1/fetch" \
     -H "Authorization: Bearer hm_sk_abc123..." \
     -H "Content-Type: application/json" \
     -d '{"site":"semanticscholar.org","endpoint":"get_paper","params":{"paper_id":"ARXIV:1706.03762","fields":"title,authors,year"}}'

You also use the same Bearer token for catalog and package routes:

curl -H "Authorization: Bearer hm_sk_abc123..." \
     -H "X-Hermai-Intent: looking up Shopify endpoints for a shopping agent" \
     "https://api.hermai.ai/v1/catalog/allbirds.com"

What a key gives you

	Anonymous	With API key (free tier)
Rate limit	5 req/hour	20 req/min burst, 1,000 req/hour, 1,000/day
Catalog lookup	Yes (with intent)	Yes (with intent)
Hosted fetch	No	Yes
Browse registry	Yes	Yes
Push schemas	No	Yes
Download full schema package	No	Yes
Activity logs in dashboard	No	Yes
Earn credits	No	Yes

Schema access toggle

Each API key has a schema access setting that controls whether unverified schemas are included in catalog responses:

Verified only: catalog returns only schemas that have been reviewed and verified by the Hermai team. Safest option.
All schemas (default): includes both verified and unverified community contributions. More coverage, less curation.

You can change this per-key in the dashboard under API Keys > Schema access.

Revoking a key

Go to Dashboard > API Keys, find the key, and click Revoke. The key stops working immediately. Revocation is permanent. Create a new key if you need one.

Security

Keys authenticate your requests. They are not used for request signing, just Bearer token auth.
Store keys securely. Don’t commit them to source control.
Each key is independently revocable, so you can rotate one without affecting others.
Keys are hashed server-side. We cannot recover a lost key.

​Creating a key

​Using a key

​What a key gives you

​Schema access toggle

​Revoking a key

​Security