Authentication

Bearer token

Pass your API key in the Authorization header using the Bearer scheme. The gateway identifies your account and applies the key’s group and quota.

Authorization: Bearer sk-your-api-key
Content-Type: application/json

Managing keys

Create, rename, rotate, and revoke keys from the API Keys page. You can set a quota, an IP whitelist, and an expiry date on each key.

Reveal a key only when you need it, and rotate it immediately if it ever leaks.

Key security

Never hard-code keys in client code or public repositories. Use environment variables or a secret manager, and prefer server-side calls when you can.