Settings

API keys

Authenticate requests to the AgentFlow API or use in external scripts.

Workspace API key

af_a1b2c••••••••••••••••••••••••abcd

Workspace ID00000000-0000-0000-0000-000000000001

# Use in requests
curl -H "x-workspace-id: 00000000-0000-0000-0000-000000000001" \
-H "x-api-key: af_a1b2c3d4e..." \
http://localhost:3001/api/workflows

Model preferences

Choose which models power planning and execution steps.

Planning model

Analyzes tasks, generates execution plans

Execution model

Runs tool calls, generates summaries

claude-sonnet-4-6

Max output tokens per step

Approval policy

Control when the platform pauses for human review.

Auto-approve read operations

Recommended

GET, list, search, fetch — run immediately without approval

Require approval for writes

Security

Create, update, delete, send — always pause for review

Note: Admin-level tools (billing, user management, bulk deletes) are always blocked and require an explicit override in the workflow config.

Webhooks

Trigger workflows from external services via HTTP POST.

Each workflow has a unique webhook URL. To trigger a workflow from Zapier, GitHub Actions, or any HTTP client:

POST http://localhost:3001/webhooks/trigger/<workflow-id>
X-Webhook-Signature: sha256(secret + body)

Default webhook secret (optional)

Danger zone

Irreversible actions. These cannot be undone.

Delete all run history

Permanently removes all workflow run logs and approval records.

Delete all workflows

Permanently removes all workflows, their nodes, and run history.