Authentication
Create a ParalonCloud API key and authenticate your inference requests with a bearer token.
Every request to the Inference API is authenticated with an API key passed as a bearer token.
Create an API key
- Open the Console and sign in.
- Go to API keys and click Create key.
- Give it a recognizable name (e.g.
Production,Testing) so you can tell keys apart later. - Copy the generated key — it starts with
prlc_. Store it somewhere safe; treat it like a password.
You can create multiple keys and delete any of them from the Console. Track per-key usage there too.
Authenticate a request
Pass the key in the Authorization header as a bearer token:
Authorization: Bearer prlc_your_key_here
With the OpenAI SDK, set it as the api_key:
from openai import OpenAI
client = OpenAI(
api_key="prlc_your_key_here",
base_url="https://paraloncloud.com/v1",
)
With curl:
curl https://paraloncloud.com/v1/models \
-H "Authorization: Bearer prlc_your_key_here"
Permissions
A key does only what its permissions allow, set when you create it and changed any time in the key's settings in the Console:
| Permission | Lets the key |
|---|---|
Inference (inference) | Call the models: chat, embeddings, classify, responses, messages, batch, images and speech. On by default |
GPU rentals (rental) | Start and stop rentals with the Rental API |
My nodes (nodes) | Manage the nodes you provide with the Provider API |
A key without Inference gets 403 with "code": "insufficient_scope" on the model endpoints; GET /v1/models still answers. Give each key only what it needs: a key for an agent that rents GPUs, or for a script that runs your nodes, does not need to call the models.
Keep your keys safe
- Never commit keys to source control or ship them in client-side code. Keep them server-side, in environment variables or a secrets manager.
- Use separate keys for different apps or environments so you can revoke one without disrupting the others.
- Rotate by creating a new key, switching your app over, then deleting the old one.
Lost a key or think it leaked? Delete it in the Console and create a new one — a deleted key stops working immediately.