Authentication

Authorization: Bearer $APIANY_API_KEY

​

Security model

• Do not expose secret API keys in browser-side code.
• Store keys in a server-side secret manager or environment variable.
• Rotate keys if they are leaked.
• Use separate keys for development, staging, and production.

​

Example

curl https://apiany.ai/v1/models \
  -H "Authorization: Bearer $APIANY_API_KEY"

​

Errors

{
  "error": {
    "type": "auth_error",
    "message": "Invalid API key"
  }
}