Authentication
Create, protect, and revoke organization API keys.
Send your key as a bearer token:
Authorization: Bearer $PAPERINSTRUMENTS_API_KEYSet api_key (Python) or apiKey (Node.js) in the OpenAI SDK to send this header.
Manage keys
Organization owners and admins create and revoke keys on the console's API keys page. A key spends its organization's prepaid balance and uses its rate limits.
We show the full key once, at creation. Store it in a secrets manager or environment variable. Create a replacement if you lose it. Revocation blocks further requests.
Use pi_live_ keys in production and pi_test_ keys in non-production environments.
API key security
Do not put keys in browser code, mobile apps, or source control. If a key leaks, revoke it and create a replacement.
Invalid, expired, revoked, or wrong-environment keys return 401 invalid_api_key.
A missing key returns 401 missing_api_key. See errors.