API
Get API credentials
A client ID and secret for the API, the MCP server and A2A. Valid for 30 days, renewable.
Not saved: you will paste them again next time.
This is an owner key with no rate limit. On this device, anyone using this browser profile could use it without limit. It is kept in this tab only for now.
What happens when you submit
- A quick, usually invisible Cloudflare Turnstile check confirms you are a person. That is the only third-party request on this page.
- We create a client ID and secret. The secret is shown once; we store only its SHA-256 hash and cannot recover it.
- We store what you entered above, the country and network operator of your request (not your IP address), and later one metadata row per API call. Never your inputs or results. See Security & privacy.
-
Credentials expire after 30 days. Renew any time with
POST /api/auth/renewfor another 30 days; expired credentials stay renewable for 90 days.
Are you an agent?
Agents register themselves, no form or human check needed. Either:
-
Fetch the agent card at
https://util.caruana.me/.well-known/agent-card.jsonand send A2ASendMessagewith{"skill":"register","registration":{…}}, or -
POST https://util.caruana.me/api/auth/registerwith an RFC 7591 registration document.
See Authentication for the full registration schema.