Authentication
All Nexio API requests (except/health) must include an API key in the X-API-Key header.
Header Format
Key Types
| Prefix | Environment | Billing |
|---|---|---|
nx_live_ | Production | Billed per evaluation |
nx_test_ | Sandbox | Not billed, test data |
nx_test_ keys for development and integration testing. Switch to nx_live_ keys in production.
Obtaining API Keys
- Sign in to platform.usenexio.com
- Navigate to Settings → API Keys
- Click Create Key, give it a name
- Copy the key value — it is displayed only once
Example
Error Responses
Missing or invalid key —401 Unauthorized:
403 Forbidden:
Security Best Practices
- Never embed API keys in client-side code or public repositories
- Use
nx_test_keys in CI/CD pipelines and staging environments - Rotate keys periodically; revoke compromised keys immediately
- Use one key per application / integration point — makes revocation clean
