Authentication

Requests are authenticated with a bearer API key.

Header

Authorization: Bearer YOUR_UNQUANT_API_KEY

Keys can be created per application and revoked individually. All keys on an account share its concurrent-stream limit.

curl https://api.unquant.io/v1/models \
  -H "Authorization: Bearer $UNQUANT_API_KEY"

A valid key with active access lists the models on your plan. An invalid or revoked key returns 401.

Store keys in server-side environment variables or a secret manager. A key in a client-side bundle is readable by anyone who loads the page.

Revoked keys are rejected. A key's full value cannot be retrieved after creation; if it is lost, create a new key and revoke the old one.