Skip to main content
HiLinkup uses account API keys, but the header depends on the wire protocol. Do not send every /v1 request with a Bearer token.
A /v1 path does not always mean Bearer authentication. Claude Messages uses /v1/messages with x-api-key and anthropic-version.
Create separate keys for different applications and environments. Store keys in environment variables or a secret manager, never in source code.
If a key is exposed, revoke it in the console and create a replacement immediately.
If /v1/models works but an inference request returns 401, verify the protocol-specific header before rotating the key. See error troubleshooting for 401 and 403 responses.
Last modified on July 31, 2026