API keys let your backend, scripts, or third-party tools call the Solvea OpenAPI on behalf of your workspace. Each key is bound to the workspace that created it, so every request is automatically scoped — no extra tenant header required.Documentation Index
Fetch the complete documentation index at: https://solvea.cx/docs/llms.txt
Use this file to discover all available pages before exploring further.
An API key carries the same access as your workspace. Treat it like a password — never commit it to a public repository, paste it into a chat, or ship it in client-side code.
Generate an API key
- Open the Solvea dashboard at app.solvea.cx.
-
In the sidebar, go to API Keys.

-
Click Generate API Key.

-
Confirm in the dialog that appears.

-
Click the copy button on the right of the key to copy it to your clipboard, then use it in your application.

Each workspace can have only one API key at a time. To issue a new key, delete the existing one first (see Rotate or delete a key).
Key format
A Solvea API key starts with thesk- prefix followed by a random hex string. The sk- prefix makes the key easy to spot in logs and lets secret-scanning tools (GitHub, gitleaks, etc.) catch accidental commits.
Use the API key
Every OpenAPI request needs a single header:| Header | Value | Purpose |
|---|---|---|
Authorization | Bearer sk-… | Authenticates the calling application and identifies your workspace |
Base URL
The Solvea OpenAPI is served fromhttps://app.solvea.cx. All endpoints live under the /api_v2/... path prefix.
Example request
A quick way to verify your key works is to list the phone numbers available to your workspace:Node.js
Python
200 response with a JSON body confirms the key is wired up correctly.
Rotate or delete a key
To rotate a key (for example, after a suspected leak or when an employee leaves):- Go to API Keys in the dashboard.
- Click the delete (trash) icon next to your existing key and confirm.
- Click Generate API Key to create a new one, and update the secret in every system that uses it.
Error reference
Common responses you may see from the OpenAPI:| HTTP | Meaning | What to check |
|---|---|---|
401 | Missing or invalid Authorization header, or the key has been deleted/disabled | Verify the Bearer sk-… value matches the key shown in the dashboard. Generate a new one if needed. |
403 | The key is valid but the workspace isn’t allowed to access this resource | Check the resource belongs to the workspace that owns this key. |
422 | The request was authenticated but failed validation | Read the response message field for the specific reason. |
Security checklist
- Store keys in a secret manager, never in source control.
- Use a separate key per integration or environment.
- Rotate keys on a regular cadence and immediately if a leak is suspected.
- Restrict access to the API Keys page to people who need it.
- Watch your logs for the
sk-prefix to catch accidental exposure.