Getting started

Authentication

Authenticate requests with your API key.

Every API request needs an API key in the Authorization header.

Authorization: Bearer $DREAMWARD_API_KEY

Get your API key

Create and manage API keys in developer settings. A key is displayed only once at creation; we store a hash, so it can never be recovered — revoke and recreate if it's lost.

Use your key

curl https://api.dreamward.ai/v1/models \
  -H "Authorization: Bearer $DREAMWARD_API_KEY"

Security best practices

Keep keys server-side — never ship them in browser or mobile code. Use environment variables, rotate keys periodically, and revoke any key you suspect is exposed.

Authentication errors

A missing or invalid key returns 401 with an authentication_error. A revoked key behaves the same as an unknown one.

Requests without a valid Authorization header are rejected before any work is done — no credits are spent.