Skip to main content
Gurubase API Keys
All API endpoints require authentication using an API key. You can obtain your API key from Gurubase Cloud or Gurubase Self-Hosted (Enterprise plan only - contact us at [email protected] for access).

​
API Key Authentication

Include your API key in the x-api-key header with all requests:
Keep your API key secure and never share it publicly. If you believe your API key has been compromised, you can delete it and generate a new one from the dashboard.

​
Restricted API Keys

By default, an API key can call every endpoint. When creating a key, you can enable Restrict to specific endpoints and select only the endpoints that key should be able to call. Requests to any other endpoint are rejected with 403. For endpoints that serve multiple HTTP methods (such as Data Sources, which supports GET, POST, and DELETE), you can additionally limit the key to specific methods. For example, selecting only GET on Data Sources produces a key that can list data sources but cannot add or delete them. This makes it possible to create read-only keys for reporting or monitoring use cases.