Skip to content
Docs menu

Get started

Authentication

Every request authenticates with a Bearer API key. Create keys in the dashboard under API Keys; the secret is shown once at creation — store it server-side and never ship it to a browser or mobile app.

http
Authorization: Bearer sk-live-xxxxxxxxxxxxxxxxxxxx
Content-Type: application/json
Key formatsk-live-… (shown once at creation)
ScopeOne key can call every model your account has access to.
RotateRevoke and recreate a key anytime in the dashboard if it leaks.
IP allowlistOptionally restrict a key to specific IPs/CIDRs (dashboard).
Treat the key like a password. Keep it in an environment variable; never commit it to source control.