Skip to content

API keys and limits

Scale includes the REST API. Keys are shown once and can be rotated.

Owners and Admins on Scale create API keys in Settings, API and MCP. A key is shown once, is stored hashed, can be read-only or read and write, and can expire. A key acts as the person who made it. If that person leaves or stops being an Admin, the key stops working.

Rotate gives you a new key right away. The old key keeps working for 24 hours so you can switch without downtime.

The full API is described in openapi.json. Send Authorization: Bearer <key>.

Scale includes 100,000 calls a month. Each response shows what is left in the X-Quota-Remaining header. When you run out, calls return a 429 error that says so; nothing is cut off silently. Each organization can make up to 600 calls a minute. Every call is written to your audit log.