Authentication

All requests to the Pinecone Nexus API authenticate with a valid Pinecone API key for the target project. The Pinecone project is the tenancy boundary.

Get an API key

Create an API key in the Pinecone console.

export PINECONE_API_KEY="YOUR_API_KEY"
export NEXUS_BASE_URL="https://YOUR_WORKSPACE_HOST/api"

YOUR_WORKSPACE_HOST is your deployment’s workspace host, from the nexus_default_workspace_data_console_url output of the install.

Session token

The primary method. Exchange your API key for a short-lived bearer token with POST /auth/login, then send that token as Authorization: Bearer <token> on every request.

curl

export NEXUS_TOKEN="$(
  curl -fsS "$NEXUS_BASE_URL/auth/login" \
    -H 'Content-Type: application/json' \
    -H 'X-Pinecone-Api-Version: 2026-07' \
    -d "{\"api_key\":\"$PINECONE_API_KEY\"}" \
  | jq -r '.token'
)"

curl -fsS "$NEXUS_BASE_URL/contexts" \
  -H "Authorization: Bearer $NEXUS_TOKEN" \
  -H 'X-Pinecone-Api-Version: 2026-07'

API key

Alternatively, send your Pinecone API key directly in the X-Pinecone-Api-Key header, with no login exchange.

curl

curl -fsS "$NEXUS_BASE_URL/contexts" \
  -H "X-Pinecone-Api-Key: $PINECONE_API_KEY" \
  -H 'X-Pinecone-Api-Version: 2026-07'

APIs

Auth

Project

Contexts

Source Files

Manifest

Curation

Knowledge

Query

Tasks

Task Files

Connectors

Get an API key

Session token

API key

​Get an API key

​Session token

​API key

Get an API key

Session token

API key