Cuenta y facturación

Claves de API

Las claves de API autentican su aplicación y autorizan el acceso a los servicios de NovaAI. Cada solicitud a la API de NovaAI requiere una clave de API válida asociada a un proyecto. Esta guía explica cómo crear, administrar y utilizar de forma segura las claves de API.

Overview

API keys identify your application when communicating with NovaAI. Each key is scoped to a project and inherits that project's permissions and usage limits.

You can create multiple API keys for different environments, making it easier to manage access across development, staging, and production.

Note: Treat API keys like passwords. Anyone with access to a valid key can make requests on behalf of your project.

Note: Treat API keys like passwords. Anyone with access to a valid key can make requests on behalf of your project.

Key Types

Key Type

Purpose

Development

Local development and testing.

Staging

Pre-production testing.

Production

Live applications and services.

Read-only

Limited access for monitoring or reporting.

Create an API Key

Follow these steps to generate a new API key.

  1. Open the Developer Dashboard.

  2. Navigate to Projects → API Keys.

  3. Select your project.

  4. Click Generate API Key.

  5. Copy and securely store the generated key.

Important: For security reasons, secret API keys are displayed only once when they're created.

Important: For security reasons, secret API keys are displayed only once when they're created.

Store Keys Securely

Instead of hardcoding credentials, store them as environment variables.

NOVA_API_KEY=your_secret_api_key

Your application can then read the value securely at runtime.

API Key Lifecycle

Rendering diagram…

API Key Properties

Property

Description

Key ID

Unique identifier for the API key.

Project

Project associated with the key.

Environment

Development, staging, or production.

Created At

Date the key was generated.

Last Used

Most recent successful API request.

Status

Active or Revoked.

Best Practices

  • Create separate keys for each environment.

  • Rotate keys regularly.

  • Remove unused keys.

  • Restrict access to trusted servers.

  • Monitor key usage for unusual activity.

Recommended Workflow: Create individual API keys for every application or service instead of sharing a single key across multiple projects. This makes monitoring, rotation, and revocation much easier.

Recommended Workflow: Create individual API keys for every application or service instead of sharing a single key across multiple projects. This makes monitoring, rotation, and revocation much easier.

Common Issues

Invalid API Key

The supplied key is incorrect or has been revoked.

Solution

Verify the key value or generate a new one from the Developer Dashboard.

Key Not Found

The requested API key no longer exists.

Solution

Create a new key and update your application configuration.

Unauthorized Requests

The API key does not have permission to access the requested resource.

Solution

Ensure the key belongs to the correct project and has the required permissions.

Danger: Never expose secret API keys in frontend applications, browser code, or public repositories. If a key is compromised, revoke it immediately and replace it with a new one.

Danger: Never expose secret API keys in frontend applications, browser code, or public repositories. If a key is compromised, revoke it immediately and replace it with a new one.

Next Step

Continue to Usage & Limits to monitor API consumption, understand quotas, and optimize resource usage across your NovaAI projects.

Documentación relacionada

¿Te resultó útil?

¿Te resultó útil?

Create a free website with Framer, the website builder loved by startups, designers and agencies.