Authentication

NagaAI has two kinds of keys. Both look the same, ng- followed by 32 characters, and neither works in place of the other.

Key	Calls	Created on
API key	Every model endpoint: chat, responses, messages, images, audio, embeddings, moderations	API Keys
Provisioning key	`/v1/account/*`: balance, activity and API key management	Provisioning Keys

GET /v1/models and GET /v1/startups need no key.

Model endpoints

Send the API key in either header. If a request carries a Bearer token and x-api-key, NagaAI uses the Bearer token.

Authorization: Bearer YOUR_API_KEY
x-api-key: YOUR_API_KEY

OpenAI SDKs send Authorization: Bearer. The Anthropic SDK sends x-api-key. Both work on every model endpoint, including /v1/messages.

Account endpoints

/v1/account/* accepts only a provisioning key, and only as Authorization: Bearer. The OpenAI and Anthropic SDKs have no methods for these endpoints, so call them over HTTP.

import os
import requests

response = requests.get(
    "https://api.naga.ac/v1/account/balance",
    headers={"Authorization": f"Bearer {os.environ['NAGAAI_PROVISIONING_KEY']}"},
)
response.raise_for_status()
print(response.json()["balance"])

const response = await fetch("https://api.naga.ac/v1/account/balance", {
  headers: { Authorization: `Bearer ${process.env.NAGAAI_PROVISIONING_KEY}` },
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
const { balance } = await response.json();
console.log(balance);

curl https://api.naga.ac/v1/account/balance \
  -H "Authorization: Bearer $NAGAAI_PROVISIONING_KEY"

The balance is a decimal string, for example "22.2782894050", so it keeps every digit.

401 errors

The error name is in error.type. On /v1/messages every row below arrives as error.type: "authentication_error", and the message tells them apart.

`error.type`	Meaning
`authentication_required`	No key, a header scheme other than `Bearer`, or `x-api-key` on an account endpoint
`invalid_api_key`	The key does not exist, or the request sent a provisioning key to a model endpoint
`disabled_api_key`	The key was disabled on the API Keys page or through the API
`expired_api_key`	The key passed its `expires_at`
`invalid_provisioning_key`	The provisioning key does not exist, or the request sent an API key to an account endpoint
`disabled_provisioning_key`	The provisioning key was disabled
`account_suspended`, `account_disabled`, `account_closed`	The account itself is restricted. Contact support.

Keep keys on your server. A key in browser or mobile code can be copied by anyone who opens the app.

Get started

How NagaAI works

Features

API guides

Account

Product

Model endpoints

Account endpoints

401 errors

​Model endpoints

​Account endpoints

​401 errors

Model endpoints

Account endpoints

401 errors