- The HTTP API authenticates with an organization API key,
z_sk_.... See Authentication. - CLI tokens (
nito_cli_...) come fromnito auth loginthrough OAuth and are also accepted on inference routes. - Hosted MCP tokens (
nito_mcp_...) are bound to the MCP endpoint and are rejected everywhere else.
Account and Usage
Account and sessions
Where account settings live and which credentials the API accepts.
Account settings live in the Browser App under Settings; none are API-key endpoints. For an integration:

