/api/keys

List keys (metadata only, no secrets)

auth: API keybase https://app.nz

Request

curl -s "https://app.nz/api/keys" \
  -H "Authorization: Bearer pk_live_..."

Authentication

Use account API keys for unattended servers and OAuth for people. `app login` is a native public-client flow with PKCE; its api-scoped token works across the CLI, REST API, desktop cloud bridge, and MCP. To authenticate users in your own app, register a client at /developers. Browser, hosted subdomain, and mobile clients are secretless and require PKCE S256; server clients exchange with a one-time client secret. The hosted appnz-auth.js client provides Firebase-style sign-in, current-user, token, and auth-state helpers.

Create a key and call the API

# Create a key (secret returned once)
curl -sX POST https://app.nz/api/keys \
  -H "Authorization: Bearer $APP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"deploy bot"}'

# Use it on every other request
curl -s https://app.nz/api/me \
  -H "Authorization: Bearer pk_live_..."