Authentication

Create and manage a BulkToken API key, then use it to authenticate requests.

Create an API key

Sign in and open API Keys. Create a key with a descriptive name, then copy its full value. BulkToken keys use the sk- prefix. Copy the prefix along with the rest of the key.

The key page lets you view and copy a key again. Check its status, expiration, independent quota, allowed models, and any IP restrictions before using it.

Authenticate with a Bearer token

Send your key in the Authorization header. Use your BulkToken key, not a key from another model provider.

curl https://bulktoken.ai/v1/models \
  -H "Authorization: Bearer $BULKTOKEN_API_KEY"

Keep keys on your server

Store keys in environment variables or your deployment secret manager. Never embed a real key in browser JavaScript, a public repository, documentation, or screenshots.

Use separate keys for development and production. To rotate a key, create a replacement, update your application, verify it works, then disable or delete the old key.

Account balance and key limits

Your account credits and the key’s own quota are separate checks. A funded account can still fail if its key has expired, exhausted its quota, or cannot access the selected model. An unlimited key quota does not make requests free.

If you get 401, check the key and header. If you get 403, read the error message to distinguish account credits, key quota, model access, or IP restrictions.