Authentication

A single bearer token opens every provider
View as Markdown

The gateway takes exactly one credential: your API key, presented as a bearer token. That token unlocks the entire catalog — no per-provider sign-ups, and no provider keys for you to store or rotate. Upstream credentials are the gateway’s responsibility; you never send one yourself (anything you do send is replaced before forwarding).

Attach the header to each request:

Authorization: Bearer YOUR_API_KEY

Example

$curl -X POST "https://api.nativeport.ai/serper" \
> -H "Authorization: Bearer YOUR_API_KEY" \
> -H "Content-Type: application/json" \
> -d '{"q": "apple inc"}'

Requests carrying an absent or unrecognized key answer 401 Unauthorized.

An API key is a password with a different name — whoever holds it spends on your account. Keep it in an environment variable or a secret manager, out of client-side bundles, and out of version control.