Authentication

All API requests require authentication via a gck_* gateway config key.

API key format

Keys start with the gck_ prefix:

gck_abc123def456...

Get your key from the dashboard.

Sending the key

Two header options (use either):

Authorization: Bearer gck_your_key_here

X-API-Key: gck_your_key_here

Example request

curl -H "Authorization: Bearer gck_your_key" \
  https://ingest.prism.optra-ai.com/v1/telemetry/stats

Validation flow

When your request arrives:

1. Key is validated and matched to your account
2. Your organization is resolved from the key
3. Key must be active and not expired
4. Request proceeds with the resolved org and developer context

Error responses

Scenario	Status	Message
No key provided	401	”Missing API key”
Invalid format	401	”Invalid API key format”
Key not found	401	”Invalid API key”
Key expired	401	”API key expired”
Key inactive	401	”API key inactive”