X-API-Key header.
Authentication Method
Include your API key in every request:- Python
- JavaScript
- cURL
Authentication Errors
Missing API Key
Missing API Key
401 UnauthorizedInvalid or Revoked Key
Invalid or Revoked Key
401 UnauthorizedInsufficient Permissions
Insufficient Permissions
403 ForbiddenThis error occurs when your API key lacks the required scope. See API Key Scopes for details.Best Practices
- Store API keys securely — Use environment variables or a secrets manager. Never hardcode them.
- Use granular scopes — Create API keys with minimal required scopes for each integration.
- Monitor key usage — Review which keys are being used and revoke unused ones.
- Implement error handling — Handle HTTP 401 and 403 responses gracefully.
Next Steps
Create API Keys
How to create and manage API keys.
API Key Scopes
Understand granular permissions.

