Authentication

Every request is authenticated with an API key created in the console.

Headers

Both headers accept the same key — use whichever your client supports:

Authorization: Bearer sk-aivo_...
# or
x-api-key: sk-aivo_...

Key scopes

• A key belongs to your account and inherits your current plan (or PAYG).
• Keys are revocable from the console; a revoked key stops working immediately.
• A key can opt in to balance fallback: when its plan allowance for a model is exhausted, requests continue against your prepaid balance.

Security

• Never commit a key to a repository or paste it into client-side code.
• Treat a key like a password: anyone with it can spend your allowance.
• Rotate by creating a new key and revoking the old one.