Header format
Pass the key in theAuthorization header:
Base URL
Use thev1 API under:
Recommended practices
- Store API keys outside source control
- Inject keys through CI or application secrets management
- Rotate keys when ownership changes
- Use separate keys for local development and automation where possible
Error shape
Representative authentication failures:| Code | Meaning |
|---|---|
401 | Missing or invalid API key |
403 | Authenticated, but not authorized for the requested resource |