Get started

Authentication

Authenticate API requests with a Nari API key.
View as Markdown

Create and revoke API keys in API Keys. Each key belongs to an organization.

Authenticate requests

Include your API key in the Authorization header:

1Authorization: Bearer YOUR_NARI_API_KEY

Use this header for both HTTP requests and WebSocket connections. A missing or invalid key returns 401 INVALID_API_KEY.

Client applications

Keep your API key on your application server. Browser and mobile apps should connect through your server, which authenticates requests to Nari and relays responses.

  • Store keys in a secret manager or server-side environment variable.
  • Use separate keys for development and production.
  • Revoke exposed keys. Never include them in frontend code or URLs.