Overview
Authentication
Authenticate Corpus API requests with an API key and country-scoped permissions.
Send your API key in the X-API-KEY header:
curl "https://corpus-api.onera.app/catalog" \
--header "X-API-KEY: your_api_key"Keys can be limited to a country or capability. A valid key without the required permission returns 403 Forbidden.
| Permission | Access |
|---|---|
us:read | United States datasets |
india:read | India datasets |
search:read | Document search |
rag:search | Natural-language Ask and governed retrieval |
litigation:read | India court judgments; also requires india:read |
data:export | India CSV, XLSX, and Parquet exports; also requires india:read |
Do not put a long-lived API key in browser source code. Frontend applications should obtain a scoped credential through their authenticated server session.