For the complete documentation index, see llms.txt. This page is also available as Markdown.

Teams, keys and scopes

Access has two layers: roles control what a person can do in the dashboard, scopes control what a key can do against the API.

Scopes

ScopeGrants
search:read / search:writeretrieve and list searches / create, cancel, export
papers:readpaper metadata, references, citations, full text where licensed
documents:read / documents:writeretrieve and list / create and delete
chats:read / chats:writeread chats and messages / create chats, send messages
extractions:read / extractions:writeread rows and schemas / create schemas and runs
paraphrases:writecreate paraphrases
detections:writecreate AI detections
topics:read / topics:writeread topic searches / create them
citations:read / citations:writelist styles / format citations
files:read / files:writedownload / upload
usage:readcredit balance and consumption
webhooks:read / webhooks:writelist endpoints / create and delete

A call outside a key's scopes returns 403 permission_error with code: scope_missing.

Roles

RoleKeysMembersBillingUsage
Ownerallmanagemanageall
Adminallmanageviewall
Developercreate and revoke ownviewown keys
Viewerviewview totals

There is exactly one Owner per organization; ownership is transferable by the current Owner.

Credits pool per organization

All keys draw from one organization balance. Two controls keep that safe:

  • Per-key monthly caps. A key that hits its cap returns 402 while other keys keep working — the standard way to stop a batch job from starving production.

  • Auto-top-up limits. A monthly ceiling on automatic purchases, set by the Owner.

One key per deployment, scoped to what that deployment does: prod-api (read + write on the resources it uses), etl-worker (extractions and files, with a monthly cap), analytics (usage:read only). Never share a key across environments — rotation then requires a coordinated deploy.

api-keys · authentication · usage · pricing-and-credits · security-compliance

Last updated