Orgo - Cloud computers for AI agents

All API requests require a Bearer token in the Authorization header.

Authorization: Bearer sk_live_your_api_key_here

Get your API key

Sign in at orgo.ai/start.
Open a workspace and click Settings.
In the API keys section, click New key.
Pick a scope (see below) and a name, then click Create key.
Copy the plaintext value. It is shown once.

Key scopes

Every API key has one of two scopes:

Scope	Can access	Use for
Account-wide	Any workspace you own.	Your laptop, dashboards, scripts that span multiple workspaces.
Workspace-scoped	One specific workspace and its computers. 403 on every other workspace.	CI, third-party integrations, scripts that should not be able to touch anything else.

Workspace-scoped keys cannot:

Create new workspaces.
List, read, modify, or delete any workspace other than the one they are scoped to.
Run computer-use agents (/v1/chat/completions) against computers in other workspaces.
Move a computer to a different workspace.

When a scoped key is used outside its workspace, the API returns:

{
  "error": "This API key is scoped to workspace <key-workspace>. It cannot access workspace <target>. Use an account-wide key, or create a key scoped to the target workspace.",
  "code": "workspace_scope_mismatch",
  "key_workspace_id": "<key-workspace>",
  "target_workspace_id": "<target>"
}

Rotating a key

Generate a new key, update your client to use it, then delete the old one. Both keys work while you migrate. API key list, creation, and deletion all live in the dashboard’s workspace settings. There is no API to manage keys programmatically yet.

Store API keys securely. Never commit them to version control or share them publicly. Rotate immediately if a key is exposed.

Examples

curl https://www.orgo.ai/api/workspaces \
  -H "Authorization: Bearer sk_live_abc123..."

import requests
import os

api_key = os.environ["ORGO_API_KEY"]

response = requests.get(
    "https://www.orgo.ai/api/workspaces",
    headers={"Authorization": f"Bearer {api_key}"},
)

const apiKey = process.env.ORGO_API_KEY;

const response = await fetch('https://www.orgo.ai/api/workspaces', {
  headers: { 'Authorization': `Bearer ${apiKey}` },
});

Environment variables

export ORGO_API_KEY=sk_live_abc123...

.env

ORGO_API_KEY=sk_live_abc123...

Error responses

Status	Body	Meaning
`401`	`{ "error": "Invalid API key..." }`	The Bearer token is not a known Orgo key. Check for typos; generate a new one if needed.
`401`	`{ "error": "Missing API key..." }`	No `Authorization` header on the request.
`403`	`{ "code": "workspace_scope_mismatch", ... }`	A workspace-scoped key tried to act on a different workspace.
`403`	`{ "error": "Access denied" }`	The key’s account does not own or belong to the target workspace.

See Troubleshooting for the full error reference and recovery steps.

Security tips

Use environment variables. Never hardcode keys.
Add .env to .gitignore.
Create a separate workspace-scoped key per integration. If one leaks, only that workspace is exposed.
Rotate keys when team members leave.

Need help?

Email spencer@orgo.ai. Always include the request_id from the error response when reporting a problem.

Overview

Computer Use API

Workspaces

Computers

Computer Lifecycle

Computer Actions

Files

Templates

Authentication

Get your API key

Key scopes

Rotating a key

Examples

Environment variables

Error responses

Security tips

Need help?

​Get your API key

​Key scopes

​Rotating a key

​Examples

​Environment variables

​Error responses

​Security tips

​Need help?

Get your API key

Key scopes

Rotating a key

Examples

Environment variables

Error responses

Security tips

Need help?