API
Authentication
Every call carries Authorization: Bearer kai_sk_…. Create a key under Settings; it is shown once and cannot be shown again, so put it straight into wherever you keep secrets. Revoking is on the same screen, and takes effect on the next call.
| Permission | What it allows |
|---|---|
kairos:read | Read broadcasts, their progress and their finished analysis. |
kairos:write | Upload, start an analysis, cancel one, delete a broadcast. Spends the workspace’s allowance. |
kairos:search | Search by meaning. Not used by the endpoints below; it belongs to the connector. |
A key belongs to the deployment it was made on. A key created on a preview URL is refused on the live site, and the other way round. If a key that worked yesterday answers 401, check which host you made it on before you check anything else.
Something here wrong or missing? Tell us — it is the kind of bug nobody reports.Back to KAIROS