Authentication

API keys

Keys are created in Dashboard → API Keys and look like lc_… followed by 48 hex characters. The full secret is displayed exactly once, at creation — we store only a hash of it. If you lose a key, revoke it and create a new one.

Using your key

Pass the key in the Authorization header of every request:

curl https://www.linguachats.ai//v1/models \
  -H "Authorization: Bearer lc_your_key_here"

Key lifecycle

• You can have up to 10 active keys at once.
• Revoking a key takes effect immediately — in-flight requests complete, new ones are rejected with 401 invalid_api_key.
• Keys inherit your account state: a pending or rejected account cannot use the API even with a valid key.

Best practices

• Never expose keys in client-side code or public repos.
• Use separate keys per environment (production, testing).
• Rotate keys periodically: create a new one, then revoke the old.