Authentication

All API requests authenticate with an API key sent in the X-API-Key header.

X-API-Key: YOUR_KEY

Create and revoke keys in the console under API keys.
A key is shown in full only once, at creation. Store it securely.
Keys are scoped to your account and count usage against your plan.
Rotate a key by creating a new one and revoking the old one — both can be active during a cutover.

Requests without a valid key receive 401 Unauthorized. Never embed a key in client-side code or a public repository.