VidLabDocsDashboard
QuickstartMarkdown

Authentication

Generations need an API key, sent as a bearer token. Keep it on your server. The model list, status and price estimate need no key.

export VIDLAB_API_KEY="vidlab_sk_your_key_here"

curl https://vidlab.ai/v1/balance \
  -H "Authorization: Bearer $VIDLAB_API_KEY"
HeaderWhat it is
AuthorizationBearer vidlab_sk_.... The key starts with vidlab_sk_.
x-api-keyThe same key, for clients that cannot set Authorization.

Make a key

Keys are made in the dashboard, from a signed-in browser: open API keys, accept the Developer API terms and create one. An API key cannot make other keys.

  • The full key is shown once, when you create it. VidLab stores only a hash, so a lost key cannot be shown again: make a new one.
  • You can keep up to 25 live keys. Delete a key on the same page to revoke it at once.
  • Keys have full access: they start and poll generations, read the balance and use the MCP endpoint.

Keep it safe

  • Put the key in an environment variable (VIDLAB_API_KEY) or your platform's secret store. Never in source code, a committed file, a URL or a prompt.
  • Call the API from your server, never from a browser or a mobile app, where anyone can read the key.
  • Use one key per app, so you can revoke one without breaking the rest. If a key leaks, delete it straight away.

When it fails

StatusCodeWhy
401unauthorizedThe key is missing, unknown, revoked or expired.
403api_key_requiredGenerations take a vidlab_sk_ key only; another kind of token was sent.
403developer_access_forbiddenThe account does not have API access yet. Write to support@vidlab.ai.