Authentication

Every request to the nXus API must include your API key in the Authorization header as a Bearer token. Keys are scoped to an organization and optionally to a specific environment (development or production).

import { NxusClient, NxusApiError } from 'nxus-qbd';


const apiKey = process.env.NXUS_API_KEY;
if (!apiKey) throw new Error("Set NXUS_API_KEY");
const nxus = new NxusClient({ apiKey });

try {
  const result = await nxus.vendors.list({
  "limit": 50
}, { connectionId: "YOUR_CONNECTION_ID" });
  console.log(result.data);
} catch (err) {
  if (!(err instanceof NxusApiError)) throw err;
  console.error(err.userMessage);
  console.error({ code: err.code, status: err.status, requestId: err.requestId });
  if (err.isValidationError) console.error(err.validationErrors);
}

Key Types

Managing API Keys

Create, view, revoke, and rotate keys from the dashboard under Settings -> API Keys.

API-key management is no longer part of the public API reference. Those operations are handled by the authenticated dashboard and our internal platform client instead of public API requests.

Key Expiry

Keys can be configured with an optional expiry date. After expiry, requests return a 401 Unauthorized response. Plan ahead and rotate before expiry using the rotate endpoint or the dashboard.

Error Responses

{
  "error": {
    "code": "API_KEY_INVALID",
    "type": "AUTHENTICATION_ERROR_TYPE",
    "message": "The provided API key is invalid or has been revoked.",
    "userFacingMessage": "Your API key is no longer valid. Create or rotate a key and try again.",
    "httpStatusCode": 401,
    "integrationCode": null,
    "requestId": "req_abc123"
  }
}