Admin Keys

Admin keys are credentials for the Recordari management API at api.recordar.io/admin/*. They are not used for MCP tool calls.

Use a workspace key in your agent config. Use an admin key when you need to create or revoke workspace keys from a script, CI/CD pipeline, or any automation that runs without a browser session. If you only use the admin portal, you never need an admin key.

Limits by plan

Workspace key limits are listed on Pricing & Limits.

Create your first admin key

Sign in at admin.recordar.io. The Admin Keys page shows a pre-filled curl snippet using your session JWT, or you can build the request yourself:

curl -X POST https://api.recordar.io/admin/keys \
  -H "Authorization: Bearer YOUR_SUPABASE_JWT" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "my-admin-key",
    "role": "org_admin",
    "workspace_id": "your-workspace-id"
  }'

The JWT comes from your Supabase session (the admin portal uses it automatically). It expires in about one hour. The response includes the plaintext admin key once - store it in a secret manager immediately.

Create a workspace key with an admin key

curl -X POST https://api.recordar.io/admin/keys \
  -H "Authorization: Bearer rcd_your_admin_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "ci-deploy-key",
    "workspace_id": "your-workspace-id"
  }'

Use the returned workspace key in your MCP client config:

{
  "mcpServers": {
    "recordari": {
      "type": "http",
      "url": "https://api.recordar.io/mcp",
      "headers": {
        "Authorization": "Bearer WORKSPACE_KEY_FROM_RESPONSE"
      }
    }
  }
}

Revoke an admin key

From the Admin Keys page in the admin portal, or via API:

curl -X DELETE https://api.recordar.io/admin/keys/your-key-id \
  -H "Authorization: Bearer rcd_your_admin_key_here"

Revocation is immediate. You can also revoke with any active admin key or a fresh Supabase JWT.