Skip to main content

Authentication

Authenticate requests to public API endpoints using an API key. Send your key in the X-API-Key header.
  • Key format: <prefix>.<secret> (example: a1b2c3d4.xxxxx)
  • Do not share: Treat the full key as a secret. Only the prefix is displayed in dashboards.

Rate limits

  • Default: 50 requests per minute per key
  • If exceeded: HTTP 429 with {"error": "Rate limit exceeded"}

Error responses

  • 401 Missing/invalid key
  • 429 Rate limit exceeded