Authentication

The Icelake API uses Bearer API keys. Create and revoke keys in the app under Settings → API keys.

Authorization: Bearer ICELAKE_API_KEY

Keep keys secret. Do not embed them in client-side web apps or public repositories. Prefer server-side usage and environment variables.

Base URL

https://icelake.io/api/v1

The multi-zone front door also works:

https://icelake.io/api/v1

Keys may include:

Action	How
Create / list / revoke	Signed-in user in Settings → API keys
Programmatic create/list	`GET/POST /api/v1/api-keys` with a session JWT (not an API key)

API keys cannot manage other keys — that requires a logged-in session.

Invalid or missing keys return an OpenAI-style error:

{
  "error": {
    "message": "Invalid API key",
    "type": "authentication_error",
    "code": "invalid_api_key",
    "param": null
  }
}