API Keys Guide

ApiKeyModule.for_root(...) registers ApiKeyService. ApiKeyGuard checks x-api-key in context.metadata headers.

Environment: API_KEY or prefixed API_KEY_* values depending on module config.

from nitrostack import ApiKeyModule, module, use_guards, ApiKeyGuard

@module(name="app", imports=[ApiKeyModule.for_root()])
class AppModule:
    pass

Stack @use_guards(ApiKeyGuard) on tools that must not be anonymous. Combine with OAuth only when you intend both mechanisms — prefer one primary auth story per server.