Skip to main content

API keys

All requests to /v1/* endpoints require an API key passed in the x-api-key header.
The /health endpoint does not require authentication.

Key format

API keys follow the format sk- followed by 32 hex characters:

Key properties

Each API key has the following attributes:

Error responses

Missing API key

Invalid or deactivated key

Security best practices

  • Store API keys in environment variables, never in source code
  • Use different keys for development and production
  • Rotate keys if you suspect they have been compromised
  • Monitor your usage via the credit balance endpoint