Authentication

API keys

Blon API keys start with blon_api_. Create and revoke them in the developer console. A key belongs to a workspace that has the API platform turned on, and every request it makes is pinned to that workspace. Send the key as a Bearer token:

curl https://api.blon.ai/v1/balance \
  -H "Authorization: Bearer $BLON_API_KEY"

The x-api-key header is also accepted.

Keep keys on your server. Never ship them in a browser or mobile app, and never send them to an upload URL.

Dollars and credits

Caller	Wallet	Amounts shown as
`blon_api_` key	The workspace’s API balance	`USD`, dollar strings such as `"0.0042"`
CLI sign-in, MCP	Your Blon account’s credits	`CREDITS`

Every amount the API returns, including balance, estimates, job cost, usage and error details, uses the caller’s currency.

Scopes

The scopes you tick when creating a key decide which endpoints it can call. A key without the scope gets 403 insufficient_scope.

Scope	Endpoints
`read`	`GET /jobs`, `GET /jobs/{id}`, `GET /models`, `GET /models/{id}`, `GET /balance`, `GET /usage`
`generate`	`POST /estimate`, `POST /jobs`, `POST /jobs/{id}/cancel`, `POST /uploads`, `POST /uploads/complete`

Errors

A missing, revoked or unknown key returns 401:

{
  "error": {
    "code": "unauthorized",
    "message": "…",
    "request_id": "req_…",
    "retryable": false,
    "retry_after_seconds": null,
    "details": null
  }
}

The blon CLI and MCP do not use API keys. They sign in with your Blon account; see CLI and MCP.

Get started

Concepts

How-to

Models

Help

Authentication

API keys

Dollars and credits

Scopes

Errors

​API keys

​Dollars and credits

​Scopes

​Errors

API keys

Dollars and credits

Scopes

Errors