API Key Presets

Prompt Orchestra currently ships three preset-backed API-key shapes.

API keys are route-scoped. They are not generic read / write / execute credentials.

`runtime_default`

Scopes: agents:read, runs:read
Intended use: setup verification plus stable backend read and inspection flows on the allowlisted public platform surface
Not for:
- public execution routes marked access_token_only
- legacy v1 run compatibility routes
- non-public prompt, cost, session, or realtime surfaces

`runtime_execution`

Scopes: skills:read, runs:read, runs:write
Intended use: trusted backend runtime execution for public skill runs, generated-image runs, and run-detail inspection
Not for:
- interactive user execution or user-session replacement
- stateless authoring and apply workflows; use authoring_ci instead
- non-public prompt, cost, session, or realtime surfaces

`authoring_ci`

Expiry required: yes
Scopes:
- agents:read
- agents:write
- models:read
- skills:read
- skills:write
- tools:read
- tools:write
- evaluations:read
- evaluations:write
- runs:read
Intended use: stateless CI/apply authoring for agents, skills, tools, and evaluations plus run inspection
Not for:
- public execution routes marked access_token_only
- interactive user execution
- non-public prompt, cost, session, or realtime surfaces

See also