Authentication & admission
Interactive sessions, passkeys and carefully scoped customer credentials.
Updated October 31, 2026
Account admission
Registration and email verification do not reserve a beta place. A place is assigned by the first confirmed qualifying payment while capacity remains available. At capacity, new purchase admission closes and the waitlist is offered; existing admitted customers can still sign in, renew and manage billing. An operational pause is shown separately. Payment confirmation, rather than the checkout return page, determines admission.
Sign in securely
Use your password or a registered passkey. Password recovery and verification require configured email delivery. Two-factor checks and fresh administrator verification are separate server-enforced requirements.
Authenticate API calls
Chat and Responses use Authorization: Bearer with a NotHoly customer key. Messages accepts that header or x-api-key, but not both together. Browser cookies do not substitute for an inference API key.
Keep credentials under control
Use the smallest necessary scopes and a spending cap. Keys can be revoked immediately. Store the original only once; the key management screen does not reveal it again.