Rajan Verma

On-prem inference · Token and handoff · Demo

What your engineer receives after the install

After I leave, your engineer is not hunting through my laptop. They mint the token, paste a few lines into your product, and keep a runbook they can run without me. Names and the key on this page are fake. A paid install uses your host and a real secret.

Sample token

Not generated yet

Prefix is demo_ on purpose. Rotate means mint again and paste the new value into your app secret. The old sample dies on this page only.

Insert in the client UI

Same call in three shapes. Replace the host on a real install. After you generate a token, it is already in the snippets.

curl

      

Handoff

A paid install ends with this document, filled with your hostnames — not a novel, not a vendor portal. Below is the same runbook, fictional company. That is what your engineer keeps when I leave.

Inference handoff — Northwind Apps (demo)

Dated 15 Sep 2026 · Owner: your engineer · Installer: Rajan Verma · Fictional company. Sample hostnames only.

What you own

Endpoints

HTTPS

The API binds on the machine. Caddy or nginx sits in front with your cert and forwards Authorization. This demo is HTTP. A paid install documents the proxy you already run — it does not fake a certificate.

Probe

curl -sf https://llm.northwind.internal/health should return {"status":"ok"}. If this fails, check the process before you touch the model.

401 means the token is wrong. 502 means the model process is down. Your product should show that, not a blank chat.

Rotate the token

  1. Mint a new secret (this UI on your network, or openssl rand -hex 24).
  2. Set API_TOKEN= in the env file on the machine.
  3. Restart the process. The previous token dies immediately.
  4. Paste the new value into the product secret. Do not email it.

Start, stop, logs

Out of this handoff

Product UI, staff logins to the model, training, and 24/7 on-call. Your app keeps the screen. This document is the generate path only.

Sample token and Northwind copy are props. They will not authenticate against the public demo generate path.