Skip to main content
All Vern API requests authenticate with an API key passed in the x-api-key header.
A key is scoped to your account and can address every migration in it. The key’s creator becomes the owner of any migration it provisions.

​
Get a key

Sign in to app.vern.so and go to Settings → API keys. Click New key and copy it — Vern doesn’t show it again after creation. For details on generating, rotating, and revoking keys, see API keys.

​
What can go wrong

  • 401 Unauthorized — key is missing, malformed, or revoked. Creating a migration additionally requires API-key auth specifically (a session token is rejected).
  • 429 Too many requests — you’ve hit the rate limit. Back off and retry. See Errors & limits.

​
Security

  • Never put your key in client-side code. Vern’s API is designed to be called from your backend.
  • Use environment variables, not hardcoded strings.
  • Rotate keys periodically and immediately if you suspect leakage.

​
Next