Authentication

Requests are authenticated with a bearer token. Create and manage keys from your dashboard, then send the key in the Authorization header.

Treat keys like passwords. Never commit them to source control or ship them in client-side code. Rotate a key immediately if it may have been exposed.