> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tokendirect.krutovoy.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Send your td- key as a Bearer token on every request

Every `/v1` request needs an API key in the `Authorization` header:

```http theme={null}
Authorization: Bearer td-...
```

## Create and manage keys

Sign in at [orvado.dev](https://orvado.dev/login) and open **Tokens**. There you can:

* create a key for each app or environment, for example `production` and `staging`
* set a spending limit per key, so one app cannot use the whole balance
* disable or delete a key you no longer trust

All keys draw from the same prepaid account balance.

## Keep keys safe

* Call Orvado from your server. Never ship a key in a mobile app, browser code or a public repository.
* Read the key from an environment variable or your secret manager.
* If a key leaks, delete it in **Tokens** and create a new one. The old key stops working at once.

## Check that a key works

List the models your key can use:

```bash theme={null}
curl https://orvado.dev/v1/models \
  -H "Authorization: Bearer $ORVADO_KEY"
```

A missing or wrong key returns `401`:

```json theme={null}
{
  "error": {
    "message": "No token provided (request id: 2026102015161442847504045555018)",
    "type": "one_api_error"
  }
}
```

The `message` text differs for a missing key and an invalid one. Check the status code, not the text.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.