Documentation

Authentication and API keys

Every Northsun (formerly Mnemix) REST and MCP request is authenticated with a tenant-scoped API key. Send it as a bearer token from server-side code; Northsun derives the tenant from the key, so callers never choose a tenant in a request body.

Authorization: Bearer sk_live_...

Production keys begin with sk_live_; test keys begin with sk_test_. A missing header, a non-bearer header, an unsupported prefix, or an unknown key returns 401 unauthorized.

Keep keys on the server

Store the key in your deployment platform's secret manager and expose only the environment-variable name to application code:

export MNEMIX_API_KEY="..."

Never place a key in browser JavaScript, a mobile bundle, a public repository, a screenshot, an agent prompt, or a support message. Your voice or chat platform should call a server-side webhook that adds the Northsun authorization header.

Verify a key safely

Use a read-only caller lookup with a test phone number already present in your tenant:

curl -i "https://mcp.mnemix.ai/v1/caller/%2B15551234567" \
  -H "Authorization: Bearer $MNEMIX_API_KEY"
  • 200 means the key is valid and the caller exists.
  • 404 means the key is valid but that caller does not exist.
  • 401 means the authorization header or key is invalid.
  • 503 means Northsun could not authenticate a cold key because its authentication dependency was temporarily unavailable; retry with backoff.

The %2B is the URL-encoded + in an E.164 phone number.

MCP uses the same key

The hosted MCP endpoint is https://mcp.mnemix.ai/mcp. Configure its HTTP headers with the same bearer token; there is no second MCP credential to provision.

Host migration: the canonical platform host is moving to mcp.northsun.ai. During the transition mcp.mnemix.ai continues to serve the full surface unchanged — existing integrations keep working, no action required. When the successor host is generally available, responses from this host will carry a Deprecation header (RFC 9745) and a Link rel="successor-version" header pointing at the corresponding mcp.northsun.ai URL; a retirement date, if one is ever set, will be announced in advance with a Sunset header (RFC 8594). No cutoff is scheduled.

Tenant isolation

The authenticated key establishes the tenant before the request reaches the REST route or MCP tool. Do not pass a tenant_id expecting to switch tenants: the frozen public API derives tenancy from authentication.

Next steps