API Authentication
All API requests require authentication via an API key.
Getting an API Key
1. Contact our team through Support
2. Describe your integration use case
3. We'll provision an API key within 24–48 hours
Using Your API Key
Include the API key in every request header:
X-API-Key: your_api_key_hereSecurity Best Practices
- —Never expose your API key in client-side code, public repos, or frontend applications
- —Use environment variables to store your key
- —Rotate keys regularly — contact support to generate a new key
- —Use IP whitelisting — we can restrict your key to specific IP addresses
- —Monitor usage — unusual activity may indicate a compromised key
Rate Limits
| Plan | Requests/min | Requests/day |
|---|---|---|
| Standard | 60 | 10,000 |
| High volume | 300 | 100,000 |
Rate limit headers are included in every response:
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
X-RateLimit-Reset: 1620000000Key Revocation
If you suspect your API key has been compromised, contact support immediately. We'll revoke the old key and issue a new one.