Authentication

Authorization: Bearer cog-live-...

​

Creating keys

1. Sign in at cogito.decart.ai.
2. Open Dashboard → API keys.
3. Click Create, name the key (we recommend naming it after the environment — production-api, local-dev), and copy the secret immediately. The full secret is shown once.

​

Best practices

• One key per environment. Local dev, staging, and production should each have their own key.
• Rotate on schedule. We surface last_used_at on every key — keys that haven’t been used in 30 days are good rotation candidates.
• Revoke instantly. Compromised keys can be revoked from the dashboard; revocation propagates within seconds.
• Don’t commit keys. Use environment variables (COGITO_API_KEY) or your platform’s secret manager.

​

Scopes

1. Open Dashboard → Projects and create a project (org owners and admins only).
2. Pick All models or Selected models only on the project page.
3. Create keys inside the project. Those keys can call only the project’s models — everything else returns the same 404 model_not_found as a model that doesn’t exist, on /v1/chat/completions, /v1/completions, /v1/models, and /v1/metrics alike.

​

Errors

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_api_key",
    "message": "The API key provided is missing or revoked.",
    "request_id": "req_..."
  }
}