API Keys

Generate and manage keys in the Flumes dashboard. Keys are secret – never commit them to Git.
Authorization: Bearer FLUMES_SK_abc123

Scoping

FieldPurpose
user_idEnd-user or session isolation
agent_idMulti-agent separation within the same project
run_idTrace a single tool/chain invocation
You can combine these for fine-grained tenancy.

Transport security

All requests go through TLS 1.2+. We terminate TLS at AWS Load Balancers before routing to the service mesh.

Data storage

  • Hot memory lives in encrypted EBS volumes (AES-256).
  • Backups are encrypted at rest and in transit.
We are not HIPAA compliant yet. Reach out if you need custom BAA.