Air

API keyStorage & AssetsOrg connection

Org-level connection

Air is connected once at the org level by an admin. The credential is shared across all groups that have been granted access — individual team members don't need to connect their own accounts.

Getting your API key

API access requires a Business or Enterprise Air workspace, and you must be a workspace owner or admin.

In Air, open Workspace Settings → API Access and generate a public API key.

Copy the workspace ID shown on the same screen and paste it in the Workspace ID field above.

Paste the API key below. It is sent as the x-api-key header, with the workspace ID as x-air-workspace-id, on every request.

The key is scoped to that ONE workspace. If you need to reach several workspaces with a single credential, Air requires its OAuth flow instead — On Belay does not support that yet.

Ready to connect?

Permissions (scopes)

These are the data scopes On Belay can be granted for Air. Your org admin controls which scopes are enabled per group.

Scope	Description	Access
`assets.read`	Read assets, versions, and CDN links	Read only
`assets.write`	Update, tag, and delete assets	Read / Write
`boards.read`	Read boards, libraries, and guests	Read only
`boards.write`	Create/update boards and membership	Read / Write
`custom_fields.read`	Read custom fields and their values	Read only
`custom_fields.write`	Create/update custom fields	Read / Write
`tags.read`	Read tags	Read only
`tags.write`	Create/update/delete tags	Read / Write
`workspace.read`	Read workspace and role metadata	Read only

Troubleshooting

"Invalid API key" or "Unauthorized" error

Double-check that you copied the full key without any leading/trailing spaces. Some platforms show a truncated preview — make sure to copy the full token. If the key was generated with restricted scopes, verify it includes the permissions listed above.

Connected but Claude can't access data

Check that your group has been granted access to this integration in On Belay → Groups → [your group] → Integrations. Also verify the specific scopes your group is permitted to use match what your query requires.

The key expires or stops working

Some API keys have expiration policies. Generate a new key in Air and update it in On Belay → Integrations → Air → Update key. Consider creating a dedicated service account or machine user for On Belay so the key isn't tied to a personal account.

Still stuck? We're happy to help.

Contact support →