Authentication

Learn how to authenticate your requests to the emma API.

API Keys

All API requests must include an API key in the Authorization header.

Authorization: Bearer YOUR_API_KEY

Getting Your API Key

Go to app.emma.ai and sign in to your account.

Navigate to Settings

Click on your profile and select Settings.

Go to API section

Select the API tab in the settings menu.

Generate a key

Click Create API Key and give it a descriptive name.

Keep your API key secure! Never expose it in client-side code or public repositories.

Example Request

cURL
Python
JavaScript

curl -X POST "https://api.emma.ai/v1/sessions" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"prompt": "Hello, emma!"}'

import requests

headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
}

response = requests.post(
    "https://api.emma.ai/v1/sessions",
    headers=headers,
    json={"prompt": "Hello, emma!"}
)

const response = await fetch("https://api.emma.ai/v1/sessions", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({ prompt: "Hello, emma!" })
});

Key Management

Rotating Keys

For security, we recommend rotating your API keys periodically:

Create a new API key
Update your applications to use the new key
Revoke the old key

Revoking Keys

To revoke an API key:

Go to Settings > API
Find the key you want to revoke
Click Revoke

Revoking a key is immediate and cannot be undone. Make sure you’ve updated all applications using that key before revoking.

Security Best Practices

Use Environment Variables

Store API keys in environment variables, not in code.

Limit Permissions

Create keys with only the permissions you need.

Rotate Regularly

Rotate keys periodically and after any potential exposure.

Monitor Usage

Review API usage logs for unusual activity.

API Overview

​Authentication

​API Keys

​Getting Your API Key

​Example Request

​Key Management

​Rotating Keys

​Revoking Keys

​Security Best Practices

Use Environment Variables

Limit Permissions

Rotate Regularly

Monitor Usage

Authentication

API Keys

Getting Your API Key

Example Request

Key Management

Rotating Keys

Revoking Keys

Security Best Practices