Documentation

Authentication

Secret keys, scoping, and how to send them.

Create a secret key in the console and send it on every call except GET /models.

Authorization: Bearer fr_live_...

Keys start with fr_live_. The full secret is shown once, when you create it; Friday cannot show it again. Revoked or expired keys stop working immediately.

Scoping a key

  • Project: usage is attributed to the key's project and counts toward its monthly cap.
  • Allowed models: other models fail with 403 model_not_allowed.
  • Expiry: a future date, after which the key returns 401 api_key_expired.
  • Spend cap: lifetime hard cap for the key, in paise in the API and rupees in the console.
  • Requests per minute: 1 to 10,000 for this key.

Tenant, project and organization always come from the key, never from the request body.