Skip to content

Authentication

SynStar AI uses API keys to authenticate API requests.

After creating an API key in Token Management, include it in the Authorization header of every request.

API Key Format

Your API key will look similar to:

text
sk-xxxxxxxxxxxxxxxx

Treat your API key like a password. Anyone with access to your key may be able to use your account balance.

Authorization Header

Use the following format when sending requests:

http
Authorization: Bearer YOUR_API_KEY

For example:

bash
curl https://www.kkiai.com/v1/chat/completions \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{
    "model": "gpt-4o",
    "messages": [
      {
        "role": "user",
        "content": "Hello!"
      }
    ]
  }'

Replace YOUR_API_KEY with the API key created in your SynStar AI dashboard.

Using an API Key with the OpenAI SDK

If your application already uses the OpenAI SDK, set your SynStar AI API key as the api_key.

python
from openai import OpenAI

client = OpenAI(
    api_key="YOUR_API_KEY",
    base_url="https://www.kkiai.com/v1"
)

response = client.chat.completions.create(
    model="gpt-4o",
    messages=[
        {"role": "user", "content": "Hello!"}
    ]
)

print(response.choices[0].message.content)

Keep Your API Key Secure

To protect your account and balance:

  • Do not expose your API key in frontend code.
  • Do not commit your API key to GitHub or other public repositories.
  • Do not share your API key in screenshots, browser recordings, or public documents.
  • Use different API keys for testing and production when possible.
  • Set quota limits if you want to control the maximum usage of a specific key.
  • Rotate or delete keys that are no longer in use.

Common Authentication Errors

Invalid Authorization Header

This usually means the Authorization header is missing or incorrectly formatted.

Make sure the header uses this format:

http
Authorization: Bearer YOUR_API_KEY

Common mistakes include:

http
Authorization: YOUR_API_KEY
http
Authorization: Bearer
http
Authorization: Bearer sk-xxx with extra spaces

Invalid API Key

If the API key is invalid, check that:

  • The key was copied correctly.
  • The key has not been deleted.
  • The key is enabled in Token Management.
  • The key has permission to access the selected model.
  • The key has not expired.

Insufficient Balance or Quota

If authentication succeeds but the request cannot be completed, check whether:

  • Your account has enough balance.
  • The API key has a quota limit.
  • The selected token group has enough available balance.
  • The selected model is available for your account.