Authentication

All API requests must include your API key in the Authorization header using the Bearer authentication scheme.

API Key Format

ORVEXA API keys use the prefix nx-sk- followed by a unique alphanumeric string. Keys are scoped to your account and carry all privileges assigned to it.

nx-sk-xxxxxxxxxxxxxxxxxxxxxxxx

Creating an API Key

1
Log in to the ORVEXA Dashboard at www.orvexaproject.com.
2
Navigate to Settings → API Keys.
3
Click "Create New Key" and give it a descriptive name.
4
Copy the key immediately — it will not be shown again for security reasons.

Authorization Header

Include your API key in every request using the Bearer scheme in the Authorization header.

Headershttp

Authorization: Bearer nx-sk-dcfab6de7407c3c5f74fb627
Content-Type: application/json

Code Examples

cURLbash

curl https://api.orvexaproject.com/v1/chat/completions \
  -H "Authorization: Bearer nx-sk-dcfab6de7407c3c5f74fb627" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "deepseek-chat",
    "messages": [{"role": "user", "content": "Hi"}]
  }'

Pythonpython

from openai import OpenAI

client = OpenAI(
    api_key="nx-sk-dcfab6de7407c3c5f74fb627",
    base_url="https://api.orvexaproject.com/v1",
)

# The SDK automatically sends the Authorization header.
response = client.chat.completions.create(
    model="deepseek-chat",
    messages=[{"role": "user", "content": "Hi"}],
)

Node.jsjavascript

import OpenAI from "openai";

const client = new OpenAI({
  apiKey: "nx-sk-dcfab6de7407c3c5f74fb627",
  baseURL: "https://api.orvexaproject.com/v1",
});

const response = await client.chat.completions.create({
  model: "deepseek-chat",
  messages: [{ role: "user", content: "Hi" }],
});

Security Best Practices

Never share or expose your API key in client-side code, public repositories, or browser applications.

Use environment variables or a secrets manager to store API keys in your application.

Rotate your API keys periodically, especially if you suspect a key has been compromised.

Use separate API keys for development, staging, and production environments.

Warning: If your API key is accidentally exposed, revoke it immediately in the Dashboard and generate a new one. Unauthorized use may result in unexpected charges.