API keys

Keys authenticate every call to the API and draw on the same credit balance as the Cinevva web tools. See authentication for how to send one and how to keep it safe.

API access needs a subscription

A key on a free plan authenticates but cannot call anything: every request returns 402subscription_required. Standard and Pro both include API access — see plans.

Loading your keys…

A secret is shown once

When you create a key, the secret appears in this page and nowhere else. We store only a hash of it, so we cannot display it again or recover it for you. Copy it into your secrets manager before you navigate away; if you lose it, revoke the key and create another.

Good practice

Give each environment and each service its own key, so revoking one never takes down everything at once. Keep keys server-side: a key shipped inside a web page, mobile binary, or game build can be extracted and used to spend your credits.

The last used column tells you which keys are actually in service. A key that has never been used, or has been idle for months, is one you can revoke without breaking anything.