Authentication
A single bearer token opens every provider
The gateway takes exactly one credential: your API key, presented as a bearer token. That token unlocks the entire catalog — no per-provider sign-ups, and no provider keys for you to store or rotate. Upstream credentials are the gateway’s responsibility; you never send one yourself (anything you do send is replaced before forwarding).
Attach the header to each request:
Example
Requests carrying an absent or unrecognized key answer 401 Unauthorized.
An API key is a password with a different name — whoever holds it spends on your account. Keep it in an environment variable or a secret manager, out of client-side bundles, and out of version control.