Authentication

thinnestAI supports two authentication methods depending on your use case.

1. Auth0 JWT — Dashboard & Management

Used by the dashboard frontend and management API endpoints (creating agents, managing knowledge, etc.). Tokens are obtained via the Auth0 login flow.

curl https://api.thinnest.ai/v1/agents \
  -H "Authorization: Bearer YOUR_AUTH0_JWT"

2. Agent API Keys — External Chat

For external integrations where end users chat with your agents. API keys are scoped to a single agent and can only be used for the Chat endpoint.

curl -X POST https://api.thinnest.ai/v1/agents/ag_c47e7c97_b2f2/chat \
  -H "Authorization: Bearer ak_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"message": "Hello"}'

Key Formats

Error Responses

{
  "detail": "Invalid or expired authentication token"
}

Rate Limits