Skip to content

Authentication

All requests authenticate with a bearer token in the Authorization header — identical to the OpenAI API.

Terminal window
Authorization: Bearer sk-...

The OpenAI SDKs handle this for you when you set api_key / apiKey.

  • Free key: create an account and verify your email. You get a key immediately, and it does not rotate — paste it into your project once and it keeps working.
  • Daily free credit: top the same key up each day from the console. The key never changes, only its balance.
  • Paid credit: add credit for higher rate limits and access to premium models.
  • Temporary keys: create short-lived, scoped keys programmatically via the Key Manager when your workflow supports it.
  • Treat keys like passwords. Do not embed them in client-side code or commit them to git.
  • Rotate immediately if a private key is exposed.
  • Each key has its own rate limits and usage cap (see Rate limits).

A missing or invalid key returns 401 Unauthorized. An exhausted or over-limit key returns 429. See Errors.