llms.txt exports and the documentation MCP server are public and need nothing.
Product interfaces
The Python SDK shares the HTTP contract but exposes a subset of its operations. Plan an integration carries the coverage table and the pre-integration acceptance gate.
Service accounts and tokens
A service account is the identity a script, a CI job, a service or an agent acts as. Its tokens are what it sends to the API or the Python SDK; the API calls a token an agent credential, and the guides call it an agent token. An owner or admin creates service accounts and their tokens on Team settings, then Service accounts. A member can read the page but not change it, and the billing role is denied it. Service accounts are created in the hosted dashboard on Team and Enterprise. Service accounts and tokens covers creating a service account, its permissions, adding, rolling, shortening and revoking tokens, the owner, and disable, enable and retire. A new service account sees no projects. A project admin gives it access on the project’s Access page (project Settings, then Access), at Operator at most. On that page the service account appears by name as a Service account row, whether or not it has a token yet.Copy the token
A new token is shown once, covered, with its last four characters visible. Copy token puts the whole token on the clipboard without showing it. Show token prints it on screen and Hide token covers it again. Nitsor keeps only a hash of the token, so it cannot show it again. If you lose it, add a token or roll the one you have. The Identity under it is the principal thatGET /api/v1/session returns and that every event written with the token carries.
Use it
Below the token, Use it shows how to make the first authenticated call. Env var prints the token covered and copies it whole. The curl and Python tabs readNITSOR_TOKEN from the environment, so the token is not written into a source file. The shell expands the variable into curl’s arguments, where another process on the machine can read it from the process list while curl runs; the Python snippet does not put it in the program’s arguments:
https://api.nitsor.com unless told otherwise. NITSOR_API_URL names another origin when the token comes from the environment. A client built with an explicit token ignores NITSOR_API_URL and uses https://api.nitsor.com unless you pass base_url. A token from another deployment therefore needs both variables. On the page, the curl snippet names your deployment’s API address directly and the Env var tab fills in NITSOR_API_URL. The Python SDK is not on PyPI; use the curl form.
The answer to the first call names the service account, the token’s hint and expiry, and the permissions and projects it reaches. Agents as callers says how an agent reads it.
Documentation exports
Each documentation page is also served as Markdown at the same address with.md added. An llms.txt index lists every page with its description, and llms-full.txt combines the complete set. The documentation host also answers a documentation-only MCP server at /mcp and publishes discovery cards under /.well-known/; the cards name a hosting-internal hostname rather than this origin, so prefer the origin you fetched them from.
Contact form
The contact form on the product site takes a name, an email address, an optional company and a message. Do not send credentials, patient or customer scan data, storage locations or confidential material through it.Next step
Read Plan an integration to choose a client and write the acceptance test, or go straight to the Public HTTP API.| Plans | All plans |
|---|---|
| Last verified | 2026-10-21 |