Skip to main content
Gateway user APIs use HTTP Bearer authentication. Console session credentials (JWT / PAT) are separate from gateway tokens — do not mix them.

Request header

Example:

Where to create a token

  1. Open the OmniMux console
  2. Go to Tokens / API Keys
  3. Create a token; optionally limit models, quota, or IP (fields depend on your deployment)
  4. Copy the secret and store it securely (often shown only once)

Security practices

  • Keep keys on the server, in a secrets manager, or local env vars
  • Never embed keys in frontend bundles, screenshots, or public issues
  • If exposed, disable / delete the token in the console and create a new one
  • Use separate tokens per environment (dev / prod) for rotation and audit

Common errors

See the API reference for full endpoint details.