Authentication

All Aura API requests require authentication via a static API key passed in the X-API-KEY header.

Generate an API Key

1. Log in to aura.host

2. Go to Settings → API Keys

3. Click New API Key, give it a descriptive name (e.g. n8n-integration), and copy the secret

Caution

The secret key is shown only once. Store it immediately in a secure location such as an environment variable or secrets manager — it cannot be retrieved again.

Using Your API Key

Pass the key in the X-API-KEY header on every request:

curl

curl https://api.aura.host/api/v1/gen_agents \
  -H "X-API-KEY: your_api_key_here"

Python

import httpx

headers = {"X-API-KEY": "your_api_key_here"}
resp = httpx.get("https://api.aura.host/api/v1/gen_agents", headers=headers)
print(resp.json())

TypeScript

const response = await fetch("https://api.aura.host/api/v1/gen_agents", {
  headers: { "X-API-KEY": "your_api_key_here" },
});
const data = await response.json();

Node.js

const res = await fetch("https://api.aura.host/api/v1/gen_agents", {
  headers: { "X-API-KEY": process.env.AURA_API_KEY },
});
const data = await res.json();

Verifying Your Key

Call GET /api/v1/auth/api_keys to confirm your key is active and see all keys on your account:

curl https://api.aura.host/api/v1/auth/api_keys \
  -H "X-API-KEY: your_api_key_here"

A successful 200 response returns a list of your active API keys.

Managing API Keys

Action	Endpoint
List all keys	GET /api/v1/auth/api_keys
Create a new key	POST /api/v1/auth/api_keys
Revoke a key	DELETE /api/v1/auth/api_keys/{key_id}

Error Responses

Status	Meaning
401	Missing or invalid X-API-KEY
403	No Authorization header present (wrong auth scheme)