Authenticate Your Requests with a Bearer Token

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

A successful model search does not confirm that the configured API key is valid. Use poyo_account (MCP) to verify authentication.

Keep your key secure#

• Never include a key in an MCP URL or prompt.
• Never commit a key to MCP configuration.
• Prefer environment interpolation when configuring a client.
• Apply API-key model and credit limits in the PoYo dashboard.

Read authentication failures#

REST requests return an HTTP 401 response:

{
  "code": 401,
  "error": {
    "message": "Invalid API key",
    "type": "authentication_error"
  }
}

MCP business and authentication failures return as Tool Results with isError: true, even when the MCP HTTP transport itself returns 200. Inspect the tool result instead of relying only on the HTTP status. See Error Codes for the full list of REST error types.

Back to Documentation Index · Next: Capability Catalog