Getting started
Authentication
Bearer token auth over TLS. Keys are scoped and revocable.
Authenticate every request with a secret key in the Authorization header. Keys begin with sk_live_ for production and sk_test_ for the sandbox.
curl https://api.journeyapi.dev/v1/account \
-H "Authorization: Bearer sk_live_9f2a4c7e1b6d8350"Secret keys carry full account authority, including spend. Keep them server side. A key exposed in browser or mobile code should be rotated from the dashboard immediately.
Key scopes
A key can be narrowed when you create it. A generate key cannot read billing; a read key cannot spend.
| Scope | Grants |
|---|---|
| generate | Create jobs on every generation endpoint |
| read | Retrieve and list jobs, read the account balance |
| billing | Add funds and read invoices |
Sandbox
A test key routes to a sandbox that returns deterministic placeholder imagery instantly and costs nothing. Use it to build against the response shape before you spend anything.
curl -X POST https://api.journeyapi.dev/v1/images \
-H "Authorization: Bearer sk_test_0000000000000000" \
-H "Content-Type: application/json" \
-d '{"prompt": "a lighthouse on a basalt cliff"}'