Skip to main content

​
Authentication

All API calls to Kovrex require authentication via API keys.

​
API Keys

You can create and manage API keys in your dashboard.

​
Key types

TypePrefixPurposeBilling
Livekvx_live_Production callsYes
Testkvx_test_Sandbox testingNo

​
Using your key

Include your API key in the Authorization header: 
Authorization: Bearer kvx_live_your_key_here
Never expose your API key in client-side code. Always make API calls from your backend.

​
Security best practices

Store your API key in environment variables, not in code:
export KOVREX_API_KEY=kvx_live_your_key_here

import os
api_key = os.environ.get("KOVREX_API_KEY")
Create separate keys for development, staging, and production. This makes it easier to rotate keys and track usage.
Periodically rotate your API keys, especially if team members leave or you suspect a key may have been compromised.
On Team and Enterprise plans, you can restrict keys by IP address or limit which agents they can access.

​
Key management

​
Creating a key

  1. Go to Settings → API Keys
  2. Click Create Key
  3. Give it a descriptive name (e.g., “Production Backend”)
  4. Choose the key type (Live or Test)
  5. Copy the key immediately — you won’t be able to see it again

​
Rotating a key

  1. Create a new key
  2. Update your application to use the new key
  3. Verify everything works
  4. Revoke the old key

​
Revoking a key

Revoked keys stop working immediately. Go to Settings → API Keys and click Revoke next to the key.

​
Team access

On Team and Enterprise plans, multiple team members can access the dashboard:
RolePermissions
OwnerFull access, billing, delete org
AdminManage members, subscriptions, keys
DeveloperUse API, view logs
ViewerRead-only dashboard access
API keys are shared across the organization. Any team member with Developer access or above can use them.