Getting started

Authentication

Every request must include a Bearer token. Keys look like sk_qu_… and are tied to your account.

Get a key

  1. Sign in via Discord on the dashboard.
  2. Copy the key shown at the top of the page. Treat it like a password — anyone with the key can spend your quota.

Send the header

Pass the key as a Bearer token on every request:

Authorization: Bearer sk_qu_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Quick test

Run this to confirm your key works. It should return a JSON list (possibly empty):

curl https://qaves.me/api/v1/images/generations \
  -H "Authorization: Bearer sk_qu_YOUR_KEY"

Never commit keys

Read keys from environment variables (process.env.QAVES_KEY), Discord bot secrets, or your platform's secret store. Never hardcode them in client-side code or public repositories.

Lost or leaked key?

Open the dashboard and rotate it. The old key stops working immediately.