Skip to main content
Every public HTTP request requires a bearer API key, except list models and the public pricing endpoints.
  • 401 — the key is missing, unknown, or revoked.
  • 403 — the key is valid but cannot access the requested resource.
  • The publish token returned by POST /streams is only for publishing media. It does not replace the API key for HTTP calls.
Keys are prefixed with ovs- and managed in the Overshoot dashboard.
Calls using your API key incur cost. Treat keys as secrets — never commit them or expose them in client-side code.