Skip to main content

Authentication

Arona API uses API key authentication. Every gateway request needs a valid key.

Auth method

Send:

Get an API key

  1. Sign in to the console
  2. Open API Keys
  3. Create a key and store it offline
Never put API keys in frontend pages, public repos, screenshots, or chat logs. Prefer environment variables.
PowerShell:
bash:

Request example

Keys and groups

API keys are usually bound to one or more groups. A group controls:
  • Available models (for example grok-4.5)
  • Upstream platform type (Grok / OpenAI / Claude, …)
  • Quota, concurrency, and billing rules
If the model is unavailable or you get a permission error, check:
  1. Key validity
  2. Whether the key’s group includes grok-4.5
  3. Account balance / subscription

Security tips

  • Use separate keys per client so you can revoke independently
  • Rotate keys periodically
  • Prefer env_key over pasting secrets into committed config files