Get started
Authentication
Was this page helpful?
Authenticate server-to-server requests with a Reviral API key and keep the secret out of client code.
Bearer authentication
Send the key in Authorization: Bearer rvr_…. API keys identify the owning account and are intended for trusted server environments.
curl "https://reviral.ai/api/v1/jobs/$JOB_ID" \
-H "Authorization: Bearer $REVIRAL_API_KEY"Key safety
- Never embed a key in browser or mobile application code.
- Use a separate key for each environment.
- Revoke a key immediately if it appears in logs or source control.
- Do not log authorization headers or full request headers.
Authentication errors
A missing, invalid, or revoked key returns HTTP 401. A server-side key verification failure returns a generic error without exposing database or credential details.