API keys

Create scoped API keys and drive Krova Cloud programmatically over the v1 REST API.

Everything you can do in the dashboard you can also do over the REST API — create and manage Cubes, snapshots, domains, port mappings, and webhooks. For the full, interactive endpoint list, see the REST API reference.

Create a key

API keys are created per spacefrom the dashboard. A key inherits the permissions of the membership that created it, so it can only do what that member can do. Copy the key when it's shown — it's only displayed once.

Authenticate

Send your key in the X-API-KEY header on every request. The base URL is:

https://krova.cloud/api/v1

For example, to list the Cubes in a space:

curl -H "X-API-KEY: kro_your_key" \
  https://krova.cloud/api/v1/spaces/{spaceId}/cubes

Idempotency

For mutating requests (creating Cubes, domains, mappings…), send an Idempotency-Key header with a unique value. Replays of the same key return the original response instead of performing the action twice — safe to retry on a flaky connection. Keys are scoped per space and expire after 24 hours.

Rate limits

Mutating POST/PATCH/DELETE endpoints are rate-limited per client IP. If you exceed the limit you'll get a 429 response — back off and retry.

OpenAPI spec

The API is described by an OpenAPI document you can feed into your own tooling or code generators:

https://krova.cloud/api/v1/openapi.json

The interactive referenceis rendered directly from that spec, so it's always in sync with the live API.