Access tokens authenticate OpenAPI calls (/openapi/* routes). They are not inference API keys (sk- prefix).

Access tokenInference API key
Prefixot_sk-
HeaderX-Access-TokenAuthorization: Bearer
UseControl plane (key mgmt, usage)Data plane (model calls)

Create and store

  1. Sign in to the console and open Access tokens.
  2. Create a token with an optional description. The plaintext is shown once — store it in your secret manager immediately.
  3. Disable or delete tokens you no longer need.

Never embed access tokens in front-end code or Git. Use them only on servers or in automation, same as inference keys.

Example

export ACCESS_TOKEN="ot_xxxxxxxx"

curl -sS "https://51kik.com/openapi/api-keys?page=1&page_size=20" \
  -H "X-Access-Token: $ACCESS_TOKEN"

Errors

HTTPcodemessage
401401X-Access-Token header is required for OpenAPI endpoints.
401401The access token is invalid, disabled, or expired.

Envelope shape: see Error responses in OpenAPI overview.

Related