Api reference
Authentication Guide
EfficientAI accepts either bearer tokens or organization API keys on most authenticated endpoints.
Header options
Authorization: Bearer <token>X-API-Key: <api-key>- Optional workspace scoping:
X-Workspace-Id: <workspace-uuid>
Bearer token flow
- Create a session with
POST /api/v1/auth/login. - Use the returned access token in
Authorizationfor subsequent requests. - Refresh with
POST /api/v1/auth/refreshwhen required.
API key flow
- Authenticate once with bearer credentials.
- Generate a key using
POST /api/v1/auth/generate-key. - Send that key in
X-API-Keyfor service-to-service usage.
Public endpoints
These routes are intentionally unauthenticated:
GET /api/v1/auth/configPOST /api/v1/auth/loginPOST /api/v1/auth/signupPOST /api/v1/auth/refreshGET /api/v1/auth/invitations/preview/{token}
All other pages in this API Reference assume authenticated access unless explicitly marked otherwise.
Community & contact
- Found a bug or have a feature request? Open a GitHub issue.
- Join our Discord for faster replies!
