All API endpoints require authentication. The recommended method for integrations is an API key.
API key authentication
Pass your API key in the X-API-Key header:
API keys use the prefix sk_ followed by a random string:
Creating an API key
- Log in to your Morphic dashboard
- Go to Settings > Developer Settings
- Click Create API Key
- Copy the key immediately (it won’t be shown again)
API keys grant full access to your account’s data. Never expose them in client-side code, public repositories, or logs.
Alternative: JWT authentication
For browser-based sessions, the API also accepts JWT tokens from Supabase Auth:
JWT authentication requires both headers. This method is primarily used by the Morphic web application.
Authentication errors