Authentication

API Keys

All API requests require a Bearer token in the Authorization header:

Authorization: Bearer sk-YOUR_API_KEY

API keys start with sk- and are created in the Dashboard under Settings → API Keys.

API keys are shown only once when created. Store them securely.

API access requires Moderator role or above in your team. Users with the basic USER role will receive a 403 Forbidden response.

Every API call consumes tokens from your team’s subscription. The system enforces limits:

When your token limit is exceeded, the API returns 429 Too Many Requests:

{
  "error": "Token limit exceeded",
  "remaining": 0,
  "reason": "Monthly token quota exhausted"
}

Status	Meaning
`401 Unauthorized`	Missing or invalid API key
`403 Forbidden`	User role insufficient (need Moderator+)
`404 Not Found`	Collection not found or not owned by your team
`429 Too Many Requests`	Token limit exceeded