Retrieve authentication API key

curl --request GET \
  --url https://flows.super.ai/api/auth/anon-key

import requests

url = "https://flows.super.ai/api/auth/anon-key"

response = requests.get(url)

print(response.text)

const options = {method: 'GET'};

fetch('https://flows.super.ai/api/auth/anon-key', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://flows.super.ai/api/auth/anon-key",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://flows.super.ai/api/auth/anon-key"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://flows.super.ai/api/auth/anon-key")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://flows.super.ai/api/auth/anon-key")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "anon_key": "<string>"
}

auth

Retrieve authentication API key

Retrieve the anonymous authentication key required for client authentication.

Returns the authentication key that client applications need to authenticate with the authentication API at core.flows.super.ai. This key enables clients to perform password-based authentication and obtain JWT access tokens.

Context:

This key is required to make authentication requests to core.flows.super.ai
The key is safe for use in client-side applications (browsers, mobile apps)
Does not grant admin privileges or direct API access
Only enables authentication operations (login, token refresh)
Same key is used across all clients and organizations
Key is long-lived and rarely rotated

Authentication Flow:

Client retrieves anonymous key from this endpoint
Client sends authentication request to core.flows.super.ai
Include anonymous key in ‘apikey’ header
Authentication service validates credentials and returns JWT tokens
Client uses JWT access token for subsequent API requests

Use Cases:

Web application initialization requiring user authentication
Mobile app setup for authentication integration
Testing authentication flow in development
Building custom authentication UI
Integrating third-party applications with authentication service

Security Considerations:

This key is public and safe for client-side applications
Does not provide access to user data or administrative functions
Only enables authentication API operations
Users must still provide valid credentials (email/password)
Rate limiting applied at authentication service level
Key rotation handled by platform administrators

Integration Example: After retrieving this key, use it to authenticate users:

Step 1: Get the anonymous key (this endpoint) Step 2: Use the key to authenticate users at core.flows.super.ai Step 3: Receive JWT tokens for API access

Related Endpoints:

POST /auth/resend-invite - Resend invitation to existing users
GET /profile/me - Retrieve authenticated user profile
See authentication tag description for complete authentication guide

Error Handling:

Returns 500 if key is not configured on server
Indicates server misconfiguration requiring administrator attention
Contact platform support if persistent errors occur

GET

api

auth

anon-key

Retrieve authentication API key

curl --request GET \
  --url https://flows.super.ai/api/auth/anon-key

import requests

url = "https://flows.super.ai/api/auth/anon-key"

response = requests.get(url)

print(response.text)

const options = {method: 'GET'};

fetch('https://flows.super.ai/api/auth/anon-key', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://flows.super.ai/api/auth/anon-key",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://flows.super.ai/api/auth/anon-key"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://flows.super.ai/api/auth/anon-key")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://flows.super.ai/api/auth/anon-key")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "anon_key": "<string>"
}

Response

Authentication key successfully retrieved

Response model for anonymous authentication key retrieval.

Returns the authentication key required for client applications to authenticate with the authentication API hosted at core.flows.super.ai.

anon_key

string

required

Anonymous authentication key for client applications. Use this key to authenticate API requests to the authentication service. Include this in your authentication API calls as the 'apikey' header. This key is safe to use in client-side applications and does not grant administrative privileges. It enables password authentication and token generation for users.

Example:

"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImFiY2RlZmdoaWprbG1ub3BxcnN0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE2ODkwMDAwMDAsImV4cCI6MTg0Njc2ODAwMH0.signature"

MCP Server Resend user invitation email