Send your API key in the Authorization header of every request, as a bearer token. Keys start with mbk_live_.
How do I create an API key?
Open API keys in the console and create a key. A key acts for your whole workspace. Copy it when it is shown and store it as a secret. Send it from your server only, never from a browser or mobile app.
What is a read-only key?
A read-only key can list and read transcripts and results and call GET /account. It cannot create, rename, cancel or delete transcripts, and those requests return 403 with the code forbidden. Use a read-only key for dashboards and reporting.
What happens with a missing or wrong key?
The request returns 401 with the error code authentication_required. See errors and limits.
How many requests can one key make?
Each key can make 300 requests a minute across all endpoints. Past that, requests return 429 with a Retry-After header.
How do I check a key and the balance?
GET /account returns the workspace, the credit balance and the key’s scope (full or read). Call it before submitting work to check there is enough credit. Last modified on October 26, 2026
