API
Authentication
Every request carries an API key as a bearer token. Keys are created in the dashboard and scoped to one workspace.
Create a key
- Sign in and open Integrations, then API. A household opens Settings, then AI assistants.
- Click Create key and give it a name you will recognize later.
- Copy the key. It starts with
inv_sk_and is shown once; we only store a hash.
Send it
Put the key in the Authorization header on every request:
Terminal
curl https://api.invoi.st/v1/usage \
-H "Authorization: Bearer inv_sk_your_key_here"Keep it server-side
A key can read and write everything in its workspace. Never ship it in a browser, a mobile app, or a public repo. If one leaks, revoke it on the API keys page and create another; revocation takes effect immediately.
Key lifecycle
| State | What it means |
|---|---|
| Active | Requests succeed. Usage is tracked per key on the dashboard. |
| Revoked | Requests fail with invalid_api_key. Revoking cannot be undone; create a new key instead. |