Skip to main content

Authentication

API Key​

An API Key is a single secret string created on the Palabra API Keys page. It is the way to authenticate every Palabra API:

  • REST API (sessions, voices, glossaries, broadcaster, etc.) — pass it in the Authorization: Bearer <API_KEY> header of every request.
  • Real-time streaming APIs (Speech-to-Speech, Speech-to-Text, Text-to-Speech) — pass it in the Authorization header or in the token query parameter when connecting to a WebSocket endpoint; the server validates the key and creates a streaming session for you automatically.
warning

The API Key is a secret. Use it in server-side integrations only — never embed it in client-side (browser or mobile) code.

Access Token​

Some actions require a temporary access token — for example, connecting to the Palabra WebRTC server. Access tokens are retrieved by creating a streaming session: the session's publisher token authorizes the connection.

tip

Operations that require an access token are clearly labelled in the relevant API documentation. For WebSocket streaming endpoints an access token is optional — an API Key can be used instead.