GETTING STARTED

Authentication

Every request uses Authorization: Bearer <AGENT_API_KEY>. Keep this server-side. Idempotency-Key is a separate operation identifier for generation requests and must never contain credentials or sensitive data.

The public API authenticates every request with a Bearer token. Official SDKs create this header automatically.

Variable	Value	Secret
`INCEPTIVA_API_BASE_URL`	`https://api.inceptiva.com`	No
`INCEPTIVA_AGENT_ID`	Public API channel identifier	No
`INCEPTIVA_API_KEY`	Key beginning with `inc_live_`	Yes

const client = new Inceptiva({
  apiKey: process.env.INCEPTIVA_API_KEY!,
  agentId: process.env.INCEPTIVA_AGENT_ID!,
});

Keep calls in your backend, use separate keys for each environment, never log Authorization, and rotate any exposed credential immediately. A missing, invalid, or revoked key returns 401; a blocked source IP returns 403.

Proceed to your first requests.