Skip to content
rho.docs

API tokens

An API token lets code use rho as you: the Python SDK, your own scripts, and table APIs. Agents don’t need one: they connect over MCP and sign in in the browser.

Make one on the API tokens page of the rho app. Give it a name, such as “nightly import”: what it writes is signed with that name in the tables’ history.

  • A token starts with rho_sk_, and is shown once, when it’s made. Copy it then: rho keeps only a hash.
  • It can do anything you can in your workspace.
  • Revoke it on the same page. It stops working at once.

Send it as a bearer token:

curl -H "Authorization: Bearer rho_sk_…" https://api.rho.store/v/<key>

The SDK reads it from RHO_API_KEY.

Keep tokens out of code and out of a browser. A web page that reads a table should read a public table, which needs no token.