Skip to main content
Every API request needs an API key in the Authorization header.

Get your API key

Create and manage API keys in the developer settings.

Use your key

Security best practices

  • Store API keys in environment variables, not source code.
  • Add .env files to .gitignore.
  • Revoke compromised API keys in developer settings and create replacements.
  • Use separate API keys for development and production.

Authentication errors

Missing, malformed, or invalid keys return 401 with error code invalid_api_key.
See Errors for error handling and retry guidance.