Authentication
API Key Bearer auth for inference; dashboard sessions are separate.
Auth errors
| Status | Meaning |
|---|---|
401 | Missing or invalid Authorization header / API key |
403 | Organisation suspended |
Key rotation
Rotating a Project API Key immediately invalidates the previous secret. The new value is displayed once in the dashboard and stored hashed. Plan client cutover before rotating.