Authentication
Authenticate requests to public API endpoints using an API key.Header
Send your key in theX-API-Key
header.
- Key format:
<prefix>.<secret>
(example:a1b2c3d4.xxxxx
) - Do not share: Treat the full key as a secret. Only the
prefix
is displayed in dashboards.
Rate limits
- Default: 50 requests per minute per key
- If exceeded: HTTP 429 with
{"error": "Rate limit exceeded"}
Error responses
- 401 Missing/invalid key
- 429 Rate limit exceeded