Skip to main content

Authentication

All relay API requests require an API key sent as a Bearer token.

Header format​

Authorization: Bearer YOUR_API_KEY

Example:

curl https://api.metotoken.ai/v1/models \
  -H "Authorization: Bearer YOUR_API_KEY"

Key security​

  • Never commit API keys to git or expose them in browser-side code
  • Rotate keys immediately if you suspect a leak
  • Use separate keys per environment (development, staging, production)
  • Restrict keys with IP allowlists when your dashboard supports it

Account security​

  • Enable two-factor authentication (2FA) in your profile when available
  • Use Passkeys if supported for your account
  • Report suspicious activity to security@metotoken.ai

Unauthorized responses​

HTTP statusMeaning
401Missing or invalid API key
403Key valid but not allowed for this action or model

See Errors for the full error format.