QMindMath developers
Dashboard

Getting started

Markdown ↗

Authentication

Every application request is authenticated with a Math API key in the Authorization header.

Send your key

HTTP
Authorization: Bearer YOUR_API_KEY

Use HTTPS and send the key in the header, never in a URL. The public documentation and OpenAPI specification do not require authentication.

cURL
curl --fail-with-body 'https://math-api.qmindlabs.ai/api/auth/session' \
  -H "Authorization: Bearer $MATH_API_KEY"

Issue, rotate, and revoke

Your administrator issues your initial key. A key with keys:manage can issue another key within its own role and scopes. Non-admins can issue keys only for themselves.

  1. Create a replacement key and save its secret immediately; it is returned once.
  2. Update your integration and verify a successful request.
  3. Revoke the old key. Revocation applies across the service.

Keys expire after 90 days by default, with a maximum of 365 days and 50 active keys per member.

POSTCreate an API keyDELETERevoke an API key

Browser requests

The built-in tester omits cookies and calls this API host directly. Credentials are not stored in browser storage or sent through a third-party proxy. API-key requests with dashboard identity cookies are rejected. Navigating away or reloading requires entering your key again.

Troubleshooting access

StatusWhat to check
401Missing, malformed, expired, or revoked key.
403Required scope, role, enabled membership, or request origin.
404The resource may be unavailable or outside your assignments.

Check roles and scopes and keep the x-request-id response header when reporting a problem.