API Keys
API keys authenticate the CLI and the /flashcards skill when uploading cards to your account.
Generating a key
- Open the Amber web app
- Click your profile icon in the top right
- Select API Keys
- Click Generate New Key
- Copy the key — it’s only shown once
Using a key
Pass it to the CLI:
amber-cards login --api-key YOUR_KEY
The key is stored locally in ~/.config/amber-cards/ and used for all subsequent uploads.
Revoking keys
You can revoke any key from the API Keys page in the web app. Revoked keys stop working immediately.
Security
- Keys are hashed before storage — we never store your raw key
- Each key is scoped to your account only
- Generate separate keys for different machines if you want granular revocation