API keys
All requests to/v1/* endpoints require an API key passed in the x-api-key header.
/health endpoint does not require authentication.
Key format
API keys follow the formatsk- followed by 32 hex characters:
Key properties
Each API key has the following attributes:Error responses
Missing API key
Invalid or deactivated key
Security best practices
- Store API keys in environment variables, never in source code
- Use different keys for development and production
- Rotate keys if you suspect they have been compromised
- Monitor your usage via the credit balance endpoint