Authentication

The public API uses API keys — not dashboard JWT session tokens.

Header

Authorization: Bearer tq_live_<your_key>

Create keys in the dashboard under Settings → API Keys. Keys are shown once at creation.

Scopes

Each key carries scoped permissions, for example:

• agents:read / agents:write
• squads:read / squads:write
• invoke:write
• channels:read / channels:write
• calls:read / calls:write
• contacts:read / contacts:write
• tools:read / tools:write
• files:read / files:write
• analytics:read
• logs:read

Requests without the required scope return 403 with error code insufficient_scope.

Test mode

Keys prefixed with tq_test_ are intended for non-production experimentation (when enabled at creation).