Skip to main content

Authentication

Klervex supports two authentication methods.

API Key Authentication​

For server-to-server integrations and automation. Include your API key in the Authorization header:

Authorization: Bearer klv_your_api_key_here

API keys are created in Settings > API Keys in the Klervex dashboard.

Key Properties​

  • Scoped to your team
  • No expiration (revoke manually)
  • Full read/write access to team data

Session Authentication​

For the web dashboard. Uses Supabase Auth with JWT tokens in cookies. Not intended for API integrations.

Best Practices​

  • Store API keys in environment variables
  • Use one key per integration for easy revocation
  • Rotate keys periodically
  • Monitor usage via the Analytics dashboard
  • Never expose keys in client-side code or version control