Providers — Authentication

Every provider endpoint (except registration) requires the provider token in the Authorization header:

Authorization: Bearer pv_...

The token is a long random string prefixed with pv_. It is issued by the admin once after KYB verification. The platform stores only a hash of it — there is no way to recover the value, so treat it as a secret.

Errors

Status	Meaning
401	Missing, invalid, or inactive token (including a token whose provider is not yet verified or is suspended)
403	IP is not in the provider’s IP whitelist
429	RPM/RPD limit exceeded

IP whitelist

If the admin enabled an IP whitelist for your provider account, all API calls must originate from one of the allowed IPs/CIDRs. Otherwise you get 403 with a message about the IP. Reach out to the admin to update the list (e.g. when your egress IP changes).

Verifying your connection

curl -s https://api.moonez.ai/api/v1/provider/me \
  -H "Authorization: Bearer pv_..."

A 200 response returns your profile:

{
  "success": true,
  "data": {
    "uuid": "…",
    "name": "acme-gen",
    "status": "verified",
    "rpm_limit": 300,
    "rpd_limit": 50000,
    "models": ["gemini-2.5-flash-image"]
  }
}

If status is pending, you are not verified yet — contact the admin.