Authentication

Securing your requests to Krixai

Krixai uses API keys to authenticate your requests. You’ll need two keys:

Key	Header	Purpose
Your LLM API key	Authorization: Bearer sk-...	Passed through to your LLM provider (OpenAI, Anthropic, etc). Krixai never stores this.
Your Krixai key	X-Krixai-Key: kx-...	Authenticates you with Krixai. Get it from your dashboard.

Key Types

Key Prefix	Environment	Usage
kx-test-	Sandbox	For development. Detections are logged but never block.
kx-live-	Production	Real detection. Can block based on your policy.

Security Guarantees

No Key Storage

Your LLM API key is passed through in-memory and never stored or logged by Krixai.

Instant Rotation

Krixai API keys can be rotated instantly from the dashboard.

In-Transit Encryption

All traffic is encrypted via TLS 1.3.