Getting StartedSecurity Standard
Authentication & API Key Management
Learn how to authenticate requests with Bearer tokens, configure fine-grained permissions, and handle key rotation.
All requests to the API100 Gateway require standard HTTP Bearer token authentication via the Authorization header.
Header syntax:
Authorization: Bearer sk-api100-v1-...
API keys can be scoped to specific models, have monthly spending caps assigned, and be revoked instantly from the API keys console.
HTTP Authorization Headerbash
Authorization: Bearer sk-api100-v1-abcdef0123456789
Frequently Asked Questions
How are API keys validated?
API100 uses high-speed in-memory cryptographic hashing to validate tokens in under 8ms at the edge.