Skip to main content
Every API request needs an API key in the Authorization header.

Get your API key

Create and manage API keys in the developer settings.

Use your key

Security best practices

  • Store API keys in environment variables, not source code.
  • Add .env files to .gitignore.
  • Revoke compromised API keys in developer settings and create replacements.
  • Use separate API keys for development and production.

Authentication errors

Missing, malformed, or invalid keys return 401 with error code invalid_api_key.
V1 API keys do not work on this API. If you send one, the error message says so and points you to developer settings, where you can create a key for this API.
See Errors for error handling and retry guidance.