Get an API key with no account — for AI agents

Mints a working API key with no authentication, no signup form, no email, no CAPTCHA and no payment method. POST with an empty body. Intended for an agent that has found this API and has no credential, including one acting for a user who is present. Not available on a dedicated deployment, where it returns 404.

What comes back is a real free account with EVERY tool available and the FULL free monthly allowance — not a restricted sandbox and not a fraction of a tier. Do not substitute a simpler tool, or a smaller run, than the one you were asked for. POST /api/validate-job costs nothing and does NOT consume a job, so use it to get the payload right first. The response's limits is authoritative.

The one difference from a signed-up account is that an unclaimed credential EXPIRES (see expiresAt). /api/submit-job and /api/submit-batch both work; /api/submit-pipeline, /api/run-pipeline and /api/virtual-screening return 403 until a human claims it. That is this limit firing, not a malformed request, so do not retry with a different payload.

The response also carries a claimUrl. Give it to the person you are working for. One sign-in there MOVES the job you ran into that person's account so they can see it, and releases the rest of the monthly free tier. The same API key keeps working, so nothing already written against it has to change; afterwards it acts as that user. Unclaimed credentials stop working when expiresAt passes.

Store the key you receive. Provisioning is rate-limited per source and platform-wide; asking for a second key because the first was not kept is the usual cause of a 429. Full agent-authentication notes are at /auth.md on this host.

post/api/agent/provision

Request

  • Base URL: https://app.tamarind.bio
  • URL: https://app.tamarind.bio/api/agent/provision
  • Auth: none required

Response

A trial credential was issued.

apiKeystring

Send as the x-api-key header on every subsequent request.

emailstring

The synthetic identity this credential belongs to, on a pseudo-TLD that cannot be registered by anyone. It is not a mailbox and nothing is sent to it.

tierstring
expiresAtstring date-time

After this instant an unclaimed credential stops authenticating.

claimUrlstring uri

Surface this to your human. One sign-in releases the rest of the free tier on the same account, without changing the API key.

usageobject

The endpoints to call next, on the host that issued this key.

nextStepsstring[]
noticestring

Plain-language statement of what this credential can and cannot do.

termsstring uri

Example response

{
  "tier": "agent-trial",
  "limits": {
    "jobs": 10,
    "allowedTools": "all",
    "expiresInDays": 30
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.