Account & Billing

API Keys

API Keys authenticate your application and authorize access to NovaAI services. Every request to the NovaAI API requires a valid API key associated with a project. This guide explains how to create, manage, and securely use API keys.

Overview

API keys identify your application when communicating with NovaAI. Each key is scoped to a project and inherits that project's permissions and usage limits.

You can create multiple API keys for different environments, making it easier to manage access across development, staging, and production.

Note: Treat API keys like passwords. Anyone with access to a valid key can make requests on behalf of your project.

Note: Treat API keys like passwords. Anyone with access to a valid key can make requests on behalf of your project.

Key Types

Key Type

Purpose

Development

Local development and testing.

Staging

Pre-production testing.

Production

Live applications and services.

Read-only

Limited access for monitoring or reporting.

Create an API Key

Follow these steps to generate a new API key.

  1. Open the Developer Dashboard.

  2. Navigate to Projects → API Keys.

  3. Select your project.

  4. Click Generate API Key.

  5. Copy and securely store the generated key.

Important: For security reasons, secret API keys are displayed only once when they're created.

Important: For security reasons, secret API keys are displayed only once when they're created.

Store Keys Securely

Instead of hardcoding credentials, store them as environment variables.

NOVA_API_KEY=your_secret_api_key

Your application can then read the value securely at runtime.

API Key Lifecycle

Rendering diagram…

API Key Properties

Property

Description

Key ID

Unique identifier for the API key.

Project

Project associated with the key.

Environment

Development, staging, or production.

Created At

Date the key was generated.

Last Used

Most recent successful API request.

Status

Active or Revoked.

Best Practices

  • Create separate keys for each environment.

  • Rotate keys regularly.

  • Remove unused keys.

  • Restrict access to trusted servers.

  • Monitor key usage for unusual activity.

Recommended Workflow: Create individual API keys for every application or service instead of sharing a single key across multiple projects. This makes monitoring, rotation, and revocation much easier.

Recommended Workflow: Create individual API keys for every application or service instead of sharing a single key across multiple projects. This makes monitoring, rotation, and revocation much easier.

Common Issues

Invalid API Key

The supplied key is incorrect or has been revoked.

Solution

Verify the key value or generate a new one from the Developer Dashboard.

Key Not Found

The requested API key no longer exists.

Solution

Create a new key and update your application configuration.

Unauthorized Requests

The API key does not have permission to access the requested resource.

Solution

Ensure the key belongs to the correct project and has the required permissions.

Danger: Never expose secret API keys in frontend applications, browser code, or public repositories. If a key is compromised, revoke it immediately and replace it with a new one.

Danger: Never expose secret API keys in frontend applications, browser code, or public repositories. If a key is compromised, revoke it immediately and replace it with a new one.

Next Step

Continue to Usage & Limits to monitor API consumption, understand quotas, and optimize resource usage across your NovaAI projects.

Was this helpful?

Was this helpful?

Create a free website with Framer, the website builder loved by startups, designers and agencies.