Public vs. private agents
Every agent in Tiny Talk is public by default. A public agent accepts messages from anyone without authentication — this is how the embedded chat widget works on your website. When you make an agent private, every request must include a valid API key. Private agents reject unauthenticated requests with a401 Unauthorized response.
You can change an agent’s visibility in the dashboard under Settings → General.
API key
To authenticate API requests, include your API key in theapi-key header:
Getting your API key
1
Open the dashboard
Go to dashboard.tinytalk.ai and select your agent.
2
Navigate to Integrations
Click Integrations in the sidebar, then scroll find Hub → Tiny Talk section.
3
Create an API key
Click Create API Key. Your key is shown once — copy it and store it securely.
API key benefits
Requests authenticated with a valid API key:- Can access private agents
- Bypass rate limiting — no per-user message throttling
- Are identified as trusted server-to-server traffic
Rate limiting
Unauthenticated requests (public agents without an API key) are rate-limited per user based on the agent’s rate limit settings. When the limit is exceeded, the API returns a429 status code with rate limit headers: