Every request needs your API key. Without it, you’ll get a
401 UNAUTHENTICATED error.
Anatomy of an API key
Your key looks like this:
Keep it secret. Don’t paste it in public code, screenshots, or
chat. If you leak it, ask us to revoke and reissue. We only show the
raw key once — at creation.
How to send it
Add an Authorization header to every request. The value is the word
Bearer plus a space plus your key:
What you’ll see in responses
Every response includes rate-limit info so you can pace yourself:
If something goes wrong, the error body always includes the
request_id — include it when you contact support.