All API endpoints (except /health) require authentication via an API key in the request header.

Getting Your API Key

Obtain an API key from your administrator. Admin users can create keys via the admin endpoints (see Internal API Reference).

Key Format

Newly issued keys are prefixed kiava_sk_ (for example, kiava_sk_abc123..., ~51 characters). Keys previously issued with the shorter sk_ prefix remain valid — the server accepts either form.

Using Your API Key

Pass your API key in the X-API-Key header on every request:

X-API-Key: YOUR_API_KEY

Example Request

curl -X POST "https://api.kiava.lesan.ai/transcribe" \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "audio_urls": ["https://example.com/audio.mp3"],
    "language": "am"
  }'

Security Best Practices

• Never commit API keys to version control
• Use environment variables to store keys
• Rotate keys regularly
• Use different keys for different environments (test vs production)

For more details, see the API Reference.