All endpoints are protected. Every request must carry a valid API key.
Getting a key
API keys are issued by the API operator. To request one, contact [email protected]. You will receive a key that looks like:
Treat your key like a password. Don’t commit it to source control or expose it in client-side code. If a key leaks, ask for it to be revoked and a new one issued.
Sending your key
Provide the key on every request using either header:
Unauthorized responses
A missing, malformed, or revoked key returns 401:
