Keys stay server-side
Ably says never to use API keys in client-side code; issue tokens from your server instead. [1]
Guides · messaging · Everyday developer services
Realtime messaging platform. Create an app and an API key with chosen capabilities; clients should use token auth issued by your server.
Researched · not yet run liveLast researched 25 October 2026 · Ably · provider site
Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.
Sign in to Ably. If you have no account yet, you create it yourself; verapli does not create accounts.
Where: https://ably.com/login
In the Ably dashboard create an app.
In the app's API Keys tab click Create a new API key, name it and choose capabilities (optionally revocable tokens or channel scoping). Keep it server-side; give clients short-lived tokens.
verapli captures ABLY_API_KEY here by plain code: encrypted in your browser, never shown to AI.
Plain-English summary, not legal advice. Each card links its source.
Ably says never to use API keys in client-side code; issue tokens from your server instead. [1]
| Env var | Secret | Format | What it is |
|---|---|---|---|
ABLY_API_KEY | secret | xxxxxx.xxxxxx:… | Ably API key (appId.keyId:secret), server only. Env var name is a verapli convention. |
Source [2]
The same entry as JSON: /api/v1/entries/ably/pubsub · requirements /api/v1/requirements/ably/pubsub · terms /api/v1/terms/ably/pubsub.
claude mcp add --transport http verapli https://verapli.com/mcp
> "What do I need for Ably Pub/Sub, and how long will it take?"
→ tools/call requirements { "provider_id": "ably/pubsub" }Provider rules change. This page is generated from verapli registry version 2026.1025.316; spotted something out of date? Tell us. Ably is not affiliated with verapli.