Skip to main content
Most requests to fal require authentication. You need an API key to call any model on the Model APIs, deploy your own with Serverless, or access any private or shared endpoint. The only exception is endpoints deployed with app_auth = "public", which accept unauthenticated requests. API keys are tied to accounts, not people. If you are working under a team, the key belongs to that team and all members share it. The fal client libraries read your key automatically from the FAL_KEY environment variable, so once it is set, every SDK call and CLI command authenticates without extra configuration.

​
Create Your API Key

1

Go to the Dashboard

Navigate to fal.ai/dashboard/keys
2

Generate a Key

Click Create Key and give it a name you’ll remember
3

Copy Your Key

Copy the key immediately. You will not be able to see it again

​
Set Your API Key

Set your key as an environment variable:
Or configure it directly in code:
Best practice: Use environment variables instead of hardcoding keys in your code. This keeps your keys secure and makes it easy to use different keys for development and production.

​
Key Permissions

When you create a key, you select a preset that controls what the key can reach. The API preset covers calls to any model on fal, including Model APIs and your own deployed endpoints. Most Platform APIs also accept it. The SERVERLESS preset adds the CLI operations that Serverless deployments need, such as fal deploy and fal run. If no preset matches your case, you select the exact permissions the key needs. See Key permissions for the full preset table and the custom policy rules.
If you are not sure which preset to select, start with API. You can create a second key with more permissions when you need one.

​
Test Your Key

Verify your key works by making a simple API call:
If you see a response with an image URL, your key is working correctly.

​
Team Keys

If you’re part of a team, make sure to select your team in the top-left corner of the dashboard before creating a key. Keys are scoped to the account (personal or team) that created them.