# Quickstart

> Create an API key and make your first authenticated request.

Source: https://docs.tune.toys/developers/quickstart/ (updated 2026-11-01)

1. Sign in, open **Settings → Developer**, create an app and a key. New keys get `read:public` only; tick each extra scope. The full key (`tt_<prefix>_<secret>`) is shown once, so store it in a secret manager.
2. Call the API with the key as a bearer token. Never send cookies with it.

```sh
export TUNETOYS_API_KEY=tt_...
curl -H "Authorization: Bearer $TUNETOYS_API_KEY" "https://tune.toys/v1/catalog?q=delay"
curl -H "Authorization: Bearer $TUNETOYS_API_KEY" https://tune.toys/v1/developer/key
```

3. From TypeScript, `new PlatformClient('https://tune.toys/v1', fetch, { apiKey })` sends the bearer, omits credentials and skips CSRF. It refuses to run in a browser page unless you pass `allowBrowserKey`.
4. For agents, run the [MCP server](https://docs.tune.toys/developers/mcp/) with `TUNETOYS_API_KEY`.

`GET /v1/developer/key` introspects the key: its app, scopes, tier and expiry. It is free of rate-limit cost, so use it to check your setup.