API keys

Live
Create, store, rotate, and revoke credentials safely.
Open in ChatGPT
(opens in new tab)Last verified: 2026-08-11

Authentication

Send the key in the HTTP Authorization header as a Bearer token. ModelRush does not accept keys in query strings.
http
Authorization: Bearer $MODELRUSH_API_KEY

Storage boundary

Use a secret manager or server-side environment variable. Never embed a key in browser JavaScript, mobile binaries, source control, screenshots, or logs.

Rotation

Create a replacement key, deploy it, verify traffic, then revoke the old key. Do not revoke first unless the key is compromised.

Failures

A missing, invalid, or revoked credential returns 401. Rate limits return 429; changing keys to bypass limits is not supported.
PreviousQuick start
NextChangelog