eggsplain
DOCS / V1 / AUTHENTICATION
AUTHENTICATION

API keys & access

Every request carries an organization-scoped API key in the Authorization header.

Bearer keys

Keys look like sk-egg-…. Create one in the console; the full secret is shown only once, so store it in an environment variable. Never ship a key in browser code or commit it.

HTTP HEADER
Authorization: Bearer $EGGSPLAIN_API_KEY

What a key controls

  • It belongs to one organization. Usage, quotas and analytics are attributed there.
  • Its model allowlist and your organization's access policy decide which models it can call (403 otherwise).
  • Per-key request-rate limits and monthly token/spend quotas apply (429 when exceeded).
  • Rotate or revoke keys from the console at any time.

Verify a key

The fastest check is GET /v1/models. Use the tester, or:

curl https://api.eggsplain.com/v1/models \
  -H "Authorization: Bearer $EGGSPLAIN_API_KEY"