Send your API key in the Authorization header on inference and /v1/models requests.
text
Authorization: Bearer everyais_your_api_keyCreate keys in the dashboard. We store only a hash, so the full key is shown once. Save it right away.
The Anthropic SDK's x-api-key: everyais_... header also works. If you send both, a valid Bearer header wins.
Keep keys on your server. Never put them in browser code or public repositories.
Per-key settings
| Setting | Behavior |
|---|---|
| Rate limit | 100 requests per minute by default. Change it when you create or edit the key |
| Spend limit (USD) | Monthly, daily and per-minute. Over the limit returns 402 spend_limit_exceeded |
| Allowed models | Other models return 403, and GET /v1/models lists only these |
| Scopes | chat, images, video, models:read. Calls outside them return 403. No scopes allows everything |
| Expiry date | Requests after this date return 401 |
What keys can't do
Account settings, payments and key management need a signed-in session. An API key gets 403 api_key_session_forbidden.
Supplier accounts can't use the APIs in these docs (403 account_kind_forbidden).
Organization keys use the organization's credits and settings, including community supply and training use. See model selection and access.