Authentication & API keys
OpenAI-compatible routes use Authorization: Bearer; Messages accepts x-api-key. Keep every key in a secret manager and rotate a key immediately if exposure is suspected.
bash
export AI_SHOP_API_KEY='sk-...'
curl 'https://ai.tavonilo.com/v1/models' -H "Authorization: Bearer $AI_SHOP_API_KEY"Safe operation
The console is authoritative for models and prices. Support will never need your API key, password, verification code, full private prompt or payment credentials.