GET STARTED · AUTHENTICATION
Authentication
Every request to api.hoonify.ai is authenticated with an API key passed as a bearer token. Keys are rotatable and revocable without downtime — there is no in-band session state to invalidate.
Bearer token
Send the key in the Authorization header on every request:
shell
Authorization: Bearer hooni_…The OpenAI Python and TypeScript SDKs read it from OPENAI_API_KEY or theapiKey constructor option — either works as long as the value is a Hoonify key.
Keys use the hooni_ prefix followed by a random secret.
One-time reveal
Keys are revealed once at creation. Hoonify stores only a SHA-256 hash — if you lose a key you can't recover it, only rotate.
Rotation
Revoke and regenerate a key from the Subscriptions Page. Rotation immimdately invalidates the previous key, which will fail with 401 unauthorized.
Related: Webhooks