Authentication
- The Master key grants access to all routes.
- The Private key grants access to all routes except the routes.
- The Public key only grants access to the following routes:
POST /indexes/:index_uid/search
GET /indexes/:index_uid/documents/:doc_id
When a master key is provided to MeiliSearch, both the private and the public keys are automatically generated. You cannot create any additional keys.
When launching an instance, you have the option of giving a master key. By doing so, all routes will be protected and will require a key to be accessed.
You can retrieve both the private and the public keys using the master key on the .
No master key
If no master key is provided, all routes can be accessed without requiring any key.
If no or a wrong API key is provided in the header you will have no access to any route and you will receive theHTTP/1.1 403 Forbidden
status code.
Since both the private and the public keys are generated based on your master key, changing the master key will result in the modification of the two other keys.
All keys will be changed. Therefore, it is not possible to change only one of the keys.