Get started

Authentication

How Kontinent API keys work.
View as Markdown

Every data-plane request authenticates with a bearer token:

Authorization: Bearer sk-kt-<43 base62 chars>

Key facts

  • Keys are 49 characters total (sk-kt- + 43 base62 characters).
  • A key is shown exactly once at creation. Only a SHA-256 hash is stored — Kontinent cannot recover a lost key, so store it securely.
  • Keys do not expire. Revoke them from the dashboard; revocation takes effect within about 30 seconds (the auth cache TTL).
  • Every request is scoped to the key’s organization, which owns the credit balance, rate limit, and usage attribution.

Treat a sk-kt- key like a password. Anyone holding it can spend your organization’s credits. Prefer environment variables or a secrets manager over committing keys to source control.

Using the key

$curl https://api.kontinent.ai/v1/models \
>  -H "Authorization: Bearer $KONTINENT_API_KEY"

When authentication fails

A bad or revoked key returns 401 with code invalid_api_key. Do not retry — the outcome will not change until you supply a valid key. See Errors for the full taxonomy.