Authentication

API keys

Create keys in the Console → API keys and send them as a bearer token. See the Authentication guide for the full walkthrough and scope list.

curl https://console.axomlabs.ai/api/jobs \
  -H "Authorization: Bearer axom_live_…"

GET /keys

List your keys (secrets are never returned).

[ { "id": "…", "name": "Production", "prefix": "axom_live_qQiW",
    "scopes": ["train", "read"], "last_used_at": null, "revoked": false,
    "created_at": "…" } ]

POST /keys

Create a key. The plaintext secret is returned once.

// request
{ "name": "Production", "scopes": ["train", "read"] }

// response
{ "id": "…", "prefix": "axom_live_qQiW", "scopes": ["train", "read"],
  "secret": "axom_live_…" }

DELETE /keys/{id}

Revoke a key. Returns 204. The key stops working immediately.

Sessions

The console UI authenticates with a signed session cookie via Google, GitHub, or email/password (/api/auth/*). Session auth is for the browser; use API keys for programmatic access.