Skip to main content

​
API Keys

All API requests require authentication using a Bearer token. Get your API key from the Developer Platform. Include your key in all requests: 
curl https://api.supermemory.ai/v3/search \
  --header 'Authorization: Bearer YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  -d '{"q": "hello"}'

​
Connector Branding

When users connect external services (Google Drive, Notion, OneDrive), they see a “Log in to Supermemory” prompt by default. You can replace this with your own app name by providing your own OAuth credentials via the settings endpoint. 
await client.settings.update({
  googleDriveCustomKeyEnabled: true,
  googleDriveClientId: "your-client-id.apps.googleusercontent.com",
  googleDriveClientSecret: "your-client-secret"
});
This works for Google Drive, Notion, and OneDrive. See the full setup in Customization.

​
Scoped API Keys

Scoped keys are restricted to a single containerTag. They can only access documents and search within that container — useful for giving limited access to specific projects, users, or tenants without exposing your full API key.Allowed endpoints: /v3/documents, /v3/memories, /v4/memories, /v3/search, /v4/search, /v4/profile

​
Create a scoped key

curl https://api.supermemory.ai/v3/auth/scoped-key \
  --request POST \
  --header 'Content-Type: application/json' \
  --header 'Authorization: Bearer YOUR_API_KEY' \
  -d '{
    "containerTag": "my-project",
    "name": "my-key-name",
    "expiresInDays": 30
  }'

​
Parameters

ParameterRequiredDefaultDescription
containerTagYes—Alphanumeric, hyphens, underscores, colons, dots
nameNoscoped_{containerTag}Display name for the key
expiresInDaysNo—1–365 days
rateLimitMaxNo500Max requests per window (1–10,000)
rateLimitTimeWindowNo60000Window in milliseconds (1–3,600,000)

​
Response

{
  "key": "sm_orgId_...",
  "id": "key-id",
  "name": "scoped_my-project",
  "containerTag": "my-project",
  "expiresAt": "2026-03-08T00:00:00.000Z",
  "allowedEndpoints": ["/v3/documents", "/v3/memories", "/v4/memories", "/v3/search", "/v4/search", "/v4/profile"]
}
Use the returned key exactly like a normal API key — it just won’t work outside its container scope.