Skip to main content

Authentication

Compute endpoints require an approved API key.

Supported headers

  • Authorization: Bearer YOUR_API_KEY
  • x-api-key: YOUR_API_KEY

Soft-launch access policy

  • Public docs and the marketing tester are open.
  • Dashboard auth exists, but self-serve signup is intentionally hidden.
  • API keys are issued after waitlist approval during this phase.

Public vs internal endpoints

  • GET /health and GET /capabilities are public.
  • POST /verify, POST /represent, and POST /compare require an API key.

Request tracing

You can provide x-request-id with a UUID value. If you do not send one, the gateway will generate it for you and echo it back in the response.