Skip to main content
Every request needs an API key in the Authorization header:
  • Create keys in the console: playground.aircaps.com → API keys. A key is shown once; AirCaps stores only a hash.
  • One key, every model. The same key works for the REST API and the streaming WebSocket.
  • Up to 10 active keys per account. Use one per service or environment so you can revoke them independently.
  • Revoke a key in the console. It stops working within 60 seconds; a streaming session already open with it runs until it ends.
  • Keep keys server-side. Never put a key in a browser, mobile app or public repository.
Requests without a valid key return 401 unauthorized; a disabled account returns 403 account_disabled. On the streaming WebSocket these arrive as an error message with the same code.
Account settings (keys, webhook signing secret, profile) can only be changed from the console, not with an API key.