Authentication

API Keys

All requests require a Bearer token in the Authorization header:

Authorization: Bearer vlx_your_api_key_here

Get your key from the Velixar Dashboard.

API keys can be scoped to limit access:

Scope	Description
`memory:read`	Search and retrieve memories
`memory:write`	Store new memories
`memory:delete`	Delete memories
`admin`	Full access to all operations

By default, new keys are created with memory:read + memory:write.

Rate limits are applied per API key based on your plan:

When rate limited, the API returns 429 with headers:

X-RateLimit-Limit: 30
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1708099260

{
  "error": "rate_limit_exceeded",
  "message": "Rate limit exceeded. Retry after 2026-02-16T10:31:00Z",
  "retry_after": 42
}