Authentication

Create keys in Console → API keys. Keys start with nf_. Send the key in the Authorization header of every request:

Authorization: Bearer nf_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

curl https://api.nanoapi.ai/v1/balance \
  -H "Authorization: Bearer $NANOAPI_API_KEY"

A key that doesn't exist, was deleted or has been reset returns 401 invalid_api_key.

Managing keys

• The full key is shown once, when you create or reset it. Store it in a secrets manager or an environment variable.
• Resetting a key invalidates the old one immediately: anything still using it gets 401 right away. To switch keys without downtime, create a new key, deploy it, then delete the old one.
• You can have several keys, each with its own name. Every task records the key that created it in its api_key field (id, name, prefix), and the task list can be filtered by api_key_id.
• Rate limits are per user, not per key: all your keys share the same limits.

These are console-only, with no API: