DEVUP Docs
Back to Dashboard

Account & Security

Authentication

API tokens and scoped JWT for secure, scope-limited inference access.

DEVUP AI supports two authentication methods:

  1. API keys — full-access tokens for your own use
  2. Scoped JWTs — short-lived, scope-limited tokens you can issue to third parties

API keys

Get your API keys from the Dashboard. Use them in the Authorization header:

bash
Authorization: Bearer $DEVUP_API_KEY

Scoped JWT

Scoped JWT tokens let you grant limited inference access to third parties without sharing your API key. You can restrict the token by:

  • Models allowed — specific model(s) only
  • Expiration — time-limited (up to 90 days)
  • Spending limit — maximum DZD spend

Spend is tracked per scoped token against your account balance.

Create a scoped JWT

Scoped JWT creation is securely managed via the Dashboard. Navigate to API Keys and click Generate Scoped Token.

You will be prompted to configure the allowed models, token duration, and an optional spending limit. Once generated, the token will be displayed for you to copy. Keep it secure!

Scoped tokens can only be issued from the dashboard because they are signed server-side.

Use a scoped JWT

Use it exactly like a regular API key in the Authorization header:

bash
curl "https://api.devupai.com/v1/chat/completions" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $SCOPED_JWT" \
  -d '{
      "model": "deepseek-ai/DeepSeek-V4-Pro",
      "messages": [{"role": "user", "content": "Hello!"}]
  }'

Requests using disallowed models, expired tokens, or over-budget tokens will be rejected.