Access is set up for you personally while we run pilots. No signup form; a short call, then your account is ready within a day.
The SDK reads it from the environment:
export SEARCHCANDY_API_KEY=sc_live_...
Every request to the API is authenticated with it. No key, no access, including the health of your own graphs.
Sign in to the console and go to Settings, then Keys. Regenerate creates a new key and kills the old one at the same moment. Nothing else changes; your graphs and history stay as they are.
Treat the key like a password. Anyone holding it can read your documents and ask questions against them. Never commit it to a repository; the environment variable keeps it out of your code.