Authentication
8 min
Send Authorization: Bearer with an lnx_live_ or lnx_dev_ key. The secret is shown once and only its SHA-256 hash is stored. Each key belongs to one project and has one billing scope.
These routes require an active dashboard session and CSRF protection for mutations, rather than an LLM Bearer key. POST accepts name, projectId, billingScope, environment (live/dev), and expiresInDays (1–365). Only project owners and members may create keys. The default expiry is 90 days; at most 20 active LLM keys per account. DELETE revokes the key.