Authentication & admission
Interactive sessions, passkeys and carefully scoped customer credentials.
Account admission
The beta counts admitted customer accounts, including unpaid accounts, plus active reservations. Registration reserves a place for five minutes; the verification flow can extend a reservation to 24 hours. Follow the expiry shown by the service. Full or paused registration uses the waitlist. Existing admitted customers retain billing access.
Sign in securely
Use your password or a registered passkey. Password recovery and verification require configured email delivery. Two-factor checks and fresh administrator verification are separate server-enforced requirements.
Authenticate API calls
Chat and Responses use Authorization: Bearer with a NotHoly customer key. Messages accepts that header or x-api-key, but not both together. Browser cookies do not substitute for an inference API key.
Keep credentials under control
Use the smallest necessary scopes and a spending cap. Keys can be revoked immediately. Store the original only once; the key management screen does not reveal it again.