Authentication

Semantil accepts either header below on every authenticated endpoint.

Bearer token

Authorization: Bearer YOUR_API_KEY

API key header

x-api-key: YOUR_API_KEY

Bearer authentication is the recommended default because most HTTP clients and agent frameworks support it directly.

Key hygiene

• Create one key per integration so it can be rotated or revoked independently.
• Keep keys in environment variables or a secret manager, never in source control.
• The full secret is shown once. Semantil stores only a hash afterward.
• If a key leaks, revoke it in the dashboard and create a replacement.

Keep documentation public and credentials private

Never paste a Semantil API key into documentation search, an issue, or a prompt. Public docs, llms.txt, and the OpenAPI contract do not require a key.