Authentication

Authenticate each request with an API key in the Authorization header.

Send the header

Send your key as a bearer on every call except the model catalogue:

Authorization: Bearer lpl_…

Only Authorization: Bearer is read.

Create keys on API keys. You need a paid plan or one completed top-up; welcome Ink doesn't count.

A key is lpl_ plus 43 characters. It's shown once: copy it when you create it.
Each key spends its account's Ink.

Give a key an Ink cap to bound what it can spend. At the cap only that key stops, with 402 key_ink_limit_reached. See Billing & Ink.

Revoke a key on API keys. New calls with it answer 401 at once; running generations finish and settle. Lost a key? Revoke it and create another.

Call the API from your server, and read the key from an environment variable.

Warning: A key spends your Ink. Never put one in a browser, a mobile app or a public repository.

Status	`code`	Fix
`401`	`invalid_api_key`	The key is missing, mistyped, revoked or expired. Check the header, or create a new key.
`402`	`key_ink_limit_reached`	The key hit its cap. Raise it on API keys, or use another key.

A 401 carries WWW-Authenticate: Bearer. To see which key you're sending, call Get the current account.

loopling.ai · grows with you, grows itself