Our Agent API has no API key. An agent asks for a stake transaction and gets unsigned bytes plus a short-lived token. Its own wallet signs. Our broadcast endpoint only sends transactions Hubra built. The token is tied to those exact bytes and expires in about 2 minutes.