cnvs.app Authentication

generated: '2026-11-04'
method: searched
source: https://cnvs.app/docs/api/
docs: https://cnvs.app/docs/api/
summary:
  types:
  - none
  - apiKey
  api_key_in:
  - header
  default: none
  note: "Docs: \"Auth : none by default — the board ID is the access key. Optional 8-char PIN lock via X-Board-Key header.\" There is no account, no API key and no OAuth."
schemes:
- name: BoardID
  type: none
  description: "No credential by default. Anyone who knows the board ID can read and write that board, identical to sharing the browser URL (https://cnvs.app/llms-full.txt)."
  sources:
  - https://cnvs.app/docs/api/
  - https://cnvs.app/llms-full.txt
- name: BoardKey
  type: apiKey
  in: header
  parameter: X-Board-Key
  description: '8-char [a-z0-9] access key (6-char legacy keys also accepted). Required for write operations on any locked board, and for ALL operations on a board locked with mode=all. Obtain via POST /api/boards/{id}/lock, which returns the key ONCE on first lock. "No recovery: lose the key, lose the board."' 
  sources:
  - openapi/cnvs-app-openapi.yml
  - https://cnvs.app/docs/api/
- name: ImportToken
  type: apiKey
  in: header
  parameter: X-Import-Token
  description: "Server-to-server infrastructure credential (single shared secret, not issued to the public). A valid token selects the infrastructure REST/MCP and board-create rate tiers; it does not bypass import, validation, per-board, board-access-lock or security limits (https://cnvs.app/quotas.json)."
  sources:
  - https://cnvs.app/quotas.json
  - openapi/cnvs-app-openapi.yml