Authentication

Learn about 01.software API authentication methods and security settings.

API Key Types

Publishable Key (Public)

• Used in the browser/client
• For read-only operations
• Used to identify the tenant
• Prefix: pk01_

Secret Key (Private)

• Used only in server environments
• Enables all read/write operations
• Used for JWT token generation

Environment Variables

NEXT_PUBLIC_SOFTWARE_PUBLISHABLE_KEY=pk01_xxxxxxxxxxxxxxxx
SOFTWARE_SECRET_KEY=sk01_xxxxxxxxxxxxxxxx

SDK Setup

Authentication is handled automatically by the SDK. See Client Setup for full configuration options.

Permissions

Security Best Practices

• Never expose the Secret Key to the browser or commit it to Git
• Rotate keys regularly from the Console
• Use HTTPS in production

Issuing API Keys

1. Log in to the 01.software Console
2. Navigate to tenant settings
3. Issue a new key in the API Keys section

Next Steps

• Collections - Available collections
• Error Handling - Handling authentication errors
• REST API - REST API reference