Skip to content

Authentication

API keys

Create API keys in the dashboard: Settings → API Keys → Create API Key.

Keys start with nru_. Include them as Bearer tokens:

Terminal window
curl https://app.neureus.ai/ai/chat \
-H "Authorization: Bearer nru_your_api_key"

API keys are scoped to your tenant — they can’t access another tenant’s data.

Publishable widget keys

For client-side use (browser, mobile), create a publishable key (pk_). These are restricted to the chat endpoint and safe to embed in public code.

Terminal window
# Create a widget key (optionally scoped to a specific agent)
POST /ai/widget/key
{ "agent_id": "agent_abc123" } # optional
# Response
{ "key": "pk_...", "keyPreview": "pk_xxxx" }

Widget keys start with pk_ and are chat-only.

Passkey authentication (dashboard)

The dashboard at app.neureus.ai uses WebAuthn passkeys — no passwords. Register your passkey on first login; subsequent logins use biometrics or PIN.

BYOK provider keys

Store your OpenAI or Anthropic key once; Neureus encrypts it with AES-GCM per tenant:

Terminal window
# Register a key
PUT /ai/providers/openai/key
{ "key": "sk-your-key" }
# Rotate a key (re-encrypts under existing DEK)
POST /ai/providers/openai/rotate
{ "key": "sk-your-new-key" }
# Remove a key
DELETE /ai/providers/openai/key
# List configured providers
GET /ai/providers

BYOK keys overlay the global provider keys — your key is used only for your tenant’s requests.