Authentication

Create keys in the app under API Keys. Keys start with lw_; the secret is shown once at creation. Only the first 12 characters are stored for display. Revoked keys return 401.

REST requests

Send the key with either header:

Authorization: Bearer lw_YOUR_SECRET

x-api-key: lw_YOUR_SECRET

WebSocket connections

Metered Rem streaming first creates a session over HTTPS with the key in an x-api-key header. Connect to the signed wsUrl returned by that request; the key is not in the WebSocket URL. The older STT WebSocket uses ?api_key=in its URL. Reverie streaming accepts either api_key in the query string or x-api-key as a header.