Authentication

The API authenticates requests with a bearer API key. Create and manage keys from your dashboard.

Passing your key

Send the key in the Authorization header:

Authorization: Bearer sk-vsh_your_key_here

The Anthropic-compatible endpoint also accepts the x-api-key header, matching Anthropic's convention.

Key security

• Secrets are shown once at creation and stored only as a hash.
• Keys are prefixed sk-vsh_ so they're easy to detect in logs and scanners.
• Revoke a compromised key instantly from the dashboard.
• Never embed a key in client-side code or commit it to source control.

Scopes

Keys carry scopes that limit what they can do:

• models:read — list and read model metadata
• chat:write — create chat completions and messages
• embeddings:write — create embeddings (when enabled)
• images:write — generate images (when enabled)
• usage:read — read usage data

Errors

A missing or invalid key returns 401; an insufficient scope returns 403. See Errors.