Authentication

API keys

Create a key on the API keys page. Keys start with cpk_, are shown once, and only a hash is stored. Send them as a bearer token. They are server-side secrets: never ship one in a browser or a public repo.

curl https://squire-henna.vercel.app/api/v1/health                                   # public
curl -H "Authorization: Bearer cpk_..." https://squire-henna.vercel.app/api/v1/me   # who am I

Dashboard sessions

The dashboard signs in with Privy (a connected wallet, Google or X) and sends its session token as the bearer instead. Your account is created automatically on first sign-in.

Scope and tiers

A key acts as its owner. Its tier sets monthly call quotas and the swap fee, see Tiers & fees. Public read endpoints (tokens, stats, leaderboard, models) need no key at all.