Pass your API key in the header on every request.
Authorization: Bearer everyais_your_api_key
You issue keys from the dashboard. Only the SHA-256 hash is stored on the server, so once you leave the screen right after issuing a key you cannot see the plaintext again.
Per-key settings
| Setting | Description |
|---|---|
| Rate limit | 100 req/min by default. Adjustable when you create or edit the key |
| Monthly/daily spend limit (USD) | 402 insufficient_quota when exceeded |
| Allowed models | When set, calls to models outside that list return 403, and GET /v1/models results are filtered to that list as well |
| Scopes | chat · images · video · models:read. Calls outside a scope return 403. Leave them all empty to allow everything |
| Expiry date | When set, requests return 401 after expiry |