Authentication

Every request to the noris LLM-as-a-Service API is authenticated with a bearer token.

Requesting an API Key

API keys are not self-service; they are issued by noris. Contact your noris representative or anfrage@noris.de.

Usage

The API key is sent as an Authorization header in the format Bearer <key>:

curl https://ai.noris.de/v1/chat/completions \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "vllm/release/gpt-oss-120b",
    "messages": [{"role": "user", "content": "Hello!"}]
  }'

When using an OpenAI-compatible SDK, the key is set during client setup, see SDK Integration.

Security Notes

• Never embed API keys in frontend code or public repositories.
• Use keys server-side only, ideally via environment variables.
• If you suspect a key has been compromised, request immediate rotation through your noris representative.

Error Handling

A missing or invalid API key results in a 401 Unauthorized:

{
  "error": {
    "message": "Invalid API key provided",
    "type": "authentication_error"
  }
}