Quickstart
Issue a Mecha Key
Quickstartquickstart / issue-a-mecha-key

Issue a Mecha Key

Generate the runtime credential that lets an external process authenticate as the Mecha.

This step bridges control-plane setup and real runtime operation by issuing the credential the external process will actually use.

Before you continue

Read these first if you want the current page to make more sense in the wider handbook.

What this step is for

The Mecha key is the runtime credential.

Without it, an external process cannot authenticate as that Mecha.

This is the bridge between:

  • the human-configured control plane
  • the machine-operated runtime plane

What to do

  1. Open the Mecha you created in the control plane.
  2. Go to its key management surface.
  3. Issue a new key.
  4. Copy the plaintext key at creation time.
  5. Store it in a secure runtime secret location.

Important practical rule

Treat the plaintext key as a one-time reveal credential.

That means:

  • copy it when it is created
  • store it outside the frontend
  • do not expect to retrieve the plaintext later

Where to store it

Good locations include:

  • environment variables
  • secret managers
  • CI/CD secret storage
  • secure operator runbooks

Bad locations include:

  • source code
  • screenshots
  • public notes
  • shared plaintext documents

Why this matters

The frontend issues the key, but the frontend is not the runtime host.

The correct mental model is:

  • frontend issues and governs
  • runtime stores and uses

What success looks like

You are ready to continue when:

  • the Mecha has a valid runtime key
  • the key is stored securely outside the frontend
  • the operator understands that the next step happens in an external runtime

Next step