Authentication

API keys

REST requests authenticate with a user API key. Keys start with nvx_ and are created in Settings → AI Connector → API.

Authorization: Bearer nvx_…

Rules

• Send the key on every request via the Authorization header
• API keys are for REST only — MCP uses OAuth sign-in
• You can keep up to 5 active keys per account
• Revoked or invalid keys return HTTP 401

Pro access

All data routes require an active Pro subscription. Without Pro, the API returns HTTP 403 with code forbidden.