Recommendation APIGuides

Authentication

How to authenticate Recommendation API requests.

API key authentication is required for all Recommendation API calls. The API keys are managed in the PSYKHE AI Dashboard.

We have two key types:

  • Public key
  • Private key

Public key

  • Use the public key in the X-PSYKHE-API-KEY header, or as the psykhe_api_key query parameter.
  • For browser/client-side calls, prefer the psykhe_api_key query parameter to avoid sending a custom auth header and reduce extra CORS preflight calls.
  • For server-to-server calls, prefer the X-PSYKHE-API-KEY header.
  • Public keys are expected to be visible in client-side usage. They identify the client configuration used by PSYKHE AI and should still be rotated regularly.
  • Recommended to rotate public keys at least monthly.

Private key

  • Private keys are used for ingestion use cases.
  • Private keys are not accepted in query parameters and must be sent in the header.

On this page