ViralGen exposes two kinds of keys: the Shortcut token that lets the iOS Shortcut pull your next scheduled reel, and, on Agency, bring your own keys for the underlying AI providers so your generation runs on your own provider accounts.
The Shortcut token
A read only token, minted from Settings → iOS Shortcut, authenticates the Shortcut when it calls /api/shortcuts/next-reel. It only serves the next due, scheduled reel. It cannot generate, spend credits, or change anything else. Paste it into the Shortcut once during setup.
Bring your own keys (Agency)
Agency is bring your own keys: you supply your own provider keys, WaveSpeed (for Qwen images and Seedance/Kling video) and RunningHub, and generation runs against your accounts. Usage is metered per provider so you can see image calls, video seconds, and cost by provider.
A broader developer API
Beyond the Shortcut token, a general purpose developer API is on the roadmap rather than live today. If you need programmatic access beyond one tap posting, that is the surface to watch.
