Authentication

Every /v1 request requires a user API key. The gateway accepts the header styles commonly used by OpenAI and Anthropic clients.

OpenAI style

Authorization: Bearer sk-your-api-key

Anthropic style

x-api-key: sk-your-api-key

Key security

The plaintext API key is shown only once after creation.
Never commit a key to source control or expose it in browser code or public logs.
If a key may be compromised, disable or delete it in the console and create a replacement.

Key restrictions

The console can restrict allowed models, IP addresses, requests per minute, and expiration. Requests outside those limits return 403 or 429.