Authentication
API keys
Create API keys in the dashboard: Settings → API Keys → Create API Key.
Keys start with nru_. Include them as Bearer tokens:
curl https://app.neureus.ai/ai/chat \ -H "Authorization: Bearer nru_your_api_key"API keys are scoped to your tenant — they can’t access another tenant’s data.
Publishable widget keys
For client-side use (browser, mobile), create a publishable key (pk_). These are restricted to the chat endpoint and safe to embed in public code.
# Create a widget key (optionally scoped to a specific agent)POST /ai/widget/key{ "agent_id": "agent_abc123" } # optional
# Response{ "key": "pk_...", "keyPreview": "pk_xxxx" }Widget keys start with pk_ and are chat-only.
Passkey authentication (dashboard)
The dashboard at app.neureus.ai uses WebAuthn passkeys — no passwords. Register your passkey on first login; subsequent logins use biometrics or PIN.
BYOK provider keys
Store your OpenAI or Anthropic key once; Neureus encrypts it with AES-GCM per tenant:
# Register a keyPUT /ai/providers/openai/key{ "key": "sk-your-key" }
# Rotate a key (re-encrypts under existing DEK)POST /ai/providers/openai/rotate{ "key": "sk-your-new-key" }
# Remove a keyDELETE /ai/providers/openai/key
# List configured providersGET /ai/providersBYOK keys overlay the global provider keys — your key is used only for your tenant’s requests.