Authentication

The cloro API uses Bearer token authentication. Create and manage your keys in the dashboard.

Using your API key

The Bearer token in the Authorization header is your API key — there’s no separate token exchange or OAuth flow. Copy the key from the dashboard and pass it directly with the Bearer prefix on every request:

Authorization: Bearer YOUR_API_KEY

Never expose your API key in client-side code or public repositories, and never share it with unauthorized users. Keep it in a secrets manager or an environment variable, not your source tree.

curl -X POST https://api.cloro.dev/v1/monitor \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"prompt": "Your prompt here", "model": "CHATGPT"}'

import requests

headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
}

response = requests.post(
    "https://api.cloro.dev/v1/monitor",
    headers=headers,
    json={"prompt": "Your prompt here", "model": "CHATGPT"}
)

const headers = {
  Authorization: "Bearer YOUR_API_KEY",
  "Content-Type": "application/json",
};

const response = await fetch("https://api.cloro.dev/v1/monitor", {
  method: "POST",
  headers: headers,
  body: JSON.stringify({ prompt: "Your prompt here", model: "CHATGPT" }),
});

client := &http.Client{}
req, _ := http.NewRequest("POST", "https://api.cloro.dev/v1/monitor", body)
req.Header.Add("Authorization", "Bearer YOUR_API_KEY")
req.Header.Add("Content-Type", "application/json")
resp, _ := client.Do(req)

Authentication errors

If authentication fails, you’ll receive a 401 Unauthorized response:

{
  "success": false,
  "error": "Invalid or missing API key"
}

Common causes:

Missing Bearer prefix: include Bearer before your API key
Invalid API key: check that you’re using the correct key
Expired API key: some API keys have expiration dates
Rate limit exceeded: you’ve exceeded your plan’s rate limit

Environment variables

CLORO_API_KEY=your_api_key_here

import os
api_key = os.getenv('CLORO_API_KEY')

const apiKey = process.env.CLORO_API_KEY;

apiKey := os.Getenv("CLORO_API_KEY")

API key management

If you suspect a key has been compromised, revoke it and generate a new one in the dashboard. You can also create multiple keys for different purposes: one for your live application, one for local development and testing, one for automated testing and deployment pipelines, and individual keys for team members.

Need help?

Check our API Reference
Get help: paid plans via the in-dashboard support widget, free tier via the Ask Assistant button in these docs

Introduction

Guides

Integrations

Authentication

Using your API key

Authentication errors

Environment variables

API key management

Need help?

​Using your API key

​Authentication errors

​Environment variables

​API key management

​Need help?

Using your API key

Authentication errors

Environment variables

API key management

Need help?