KnobaseAuthentication
Server-side Bearer serving keys. Setup tokens cannot call serving endpoints.
Authorization: Bearer $KNOBASE_API_KEY
Content-Type: application/jsonKNOBASE_API_KEY
- Server-side only. Never put it in a browser, client bundle, or LLM prompt.
- Long-lived until you revoke or rotate it.
- Scoped to one app and environment. The app is inferred from the key, not from the request body.
- Looks like kb_…. Do not commit or log the raw value.
- Setup or bootstrap credentials (kb_setup_…) cannot call serving endpoints.
- Workspace management uses a separate OAuth token. A serving key cannot call /v1/workspaces or /api/mcp.
Auth errors
| HTTP | error | Meaning |
|---|---|---|
| 401 | missing_authorization | No Authorization header |
| 401 | malformed_token | Not Bearer kb_…, or a setup token |
| 401 | invalid_token | Key digest is unknown |
| 401 | api_key_revoked | Key is revoked or inactive |