---
title: Authentication
description: Authentication methods for the Zorveus API.
---

Protected routes require the authentication method documented for that route:

1. **API Key (`zrv_...`)**: Used to execute LLM inference requests against `https://api.zorveus.com/v1` (and provider-native endpoints) or inspect connection spend on `/inference-keys/usage`. API keys are issued under an App Connection and enforce model access policies and spend caps.
2. **Service Key (`zrv_svc_...`)**: Used on trusted servers for supported `/product-users/by-external-id` operations. They cannot make inference requests. Configure apps, connections, caps, provider credentials, and webhooks in the dashboard.