API keys
All requests to/v1/* endpoints require an API key passed in the x-api-key header.
/health endpoint does not require authentication.
Key format
API keys follow the formatsk- followed by 32 hex characters:
Key properties
Each API key has the following attributes:| Property | Description |
|---|---|
key | The API key string |
name | A human-readable label |
credits_remaining | Available credits for this key |
rate_limit_per_minute | Maximum requests per minute |
is_active | Whether the key is enabled |
Error responses
Missing API key
Invalid or deactivated key
Security best practices
- Store API keys in environment variables, never in source code
- Use different keys for development and production
- Rotate keys if you suspect they have been compromised
- Monitor your usage via the credit balance endpoint