Authentication

Every request to the Minikai API is authenticated with an API key, sent as a bearer token. A key is scoped to a single workspace, so it can only read and write the records, Minis, labels and users in that workspace.

Generate a key

In the Minikai app, open Workspace Admin → Security & access and create a key. Copy it once and store it securely, for example in a secret manager or an environment variable. The key is shown only at creation time.

Send the key

Add the key to the Authorization header of every request:

Authorization: Bearer <your-api-key>

$
curl https://api.minikai.com/minikai-public/api/v1/Records \
>
  -H "Authorization: Bearer sk_live_..."

In Postman, open the request’s Authorization tab, choose Bearer Token, and paste the key.

Rotate a key

Rotate keys from the same Security & access screen. A deleted key stops working immediately, so generate the new key, deploy it, then revoke the old one once nothing is using it.