Authentication

All Voice AI requests authenticate with an X-API-Key header. Keys are issued in the Console and are scoped to a single product.

POST /ai/speech-to-text HTTP/1.1
Host: api.gocommotion.com
X-API-Key: eak_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: multipart/form-data

Sandbox vs production

Prefix	Environment	Wallet	Endpoints
eak_test_*	Sandbox	Sandbox credit wallet	Same /ai/... paths
eak_live_*	Production	Live credit wallet	Same /ai/... paths

Sandbox and production hit the same hostnames. The key prefix decides which wallet is debited and which environment processes the request. Sandbox responses are functionally equivalent but flagged as test data in the console.

Permission scopes

Each key is issued with an explicit scope list. Request only what the key needs.

Scope	Grants
speech-to-text	POST /ai/speech-to-text
text-to-speech	POST /ai/text-to-speech
transcriptions	POST /ai/transcriptions
voice-clone	POST /ai/voice-clone
voice-design	POST /ai/voice-design
speech-translation	POST /ai/speech-translation
text-translation	POST /ai/text-translation
reasoning	POST /ai/reasoning
speech-to-speech	POST /ai/speech-to-speech
streaming-text	POST /ai/streaming-text
language-intelligence	POST /ai/language-intelligence
knowledge-memory	POST /ai/knowledge and POST /ai/memory
all	All Voice AI endpoints

Rotation and revocation

Rotate keys whenever a key may have been exposed. Revocation in the console takes effect within a few seconds across the gateway.

Caution

Voice AI keys do not work for Universal API. Universal API has its own keys, its own credit wallet, and its own scope list - all managed separately in the console. A eak_live_* key submitted to a Universal API endpoint will return 401 Invalid API key.