Account & Security
Authentication
API tokens and scoped JWT for secure, scope-limited inference access.
DEVUP AI supports two authentication methods:
- API keys — full-access tokens for your own use
- Scoped JWTs — short-lived, scope-limited tokens you can issue to third parties
API keys
Get your API keys from the Dashboard. Use them in the Authorization header:
Authorization: Bearer $DEVUP_API_KEYScoped JWT
Scoped JWT tokens let you grant limited inference access to third parties without sharing your API key. You can restrict the token by:
- Models allowed — specific model(s) only
- Expiration — time-limited (up to 90 days)
- Spending limit — maximum DZD spend
Spend is tracked per scoped token against your account balance.
Create a scoped JWT
Scoped JWT creation is securely managed via the Dashboard. Navigate to API Keys and click Generate Scoped Token.
You will be prompted to configure the allowed models, token duration, and an optional spending limit. Once generated, the token will be displayed for you to copy. Keep it secure!
Scoped tokens can only be issued from the dashboard because they are signed server-side.
Use a scoped JWT
Use it exactly like a regular API key in the Authorization header:
curl "https://api.devupai.com/v1/chat/completions" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $SCOPED_JWT" \
-d '{
"model": "deepseek-ai/DeepSeek-V4-Pro",
"messages": [{"role": "user", "content": "Hello!"}]
}'Requests using disallowed models, expired tokens, or over-budget tokens will be rejected.