Authentication

Send your key#

X-Api-Key: acx_YOUR_API_KEY is also accepted. Keys belong to the account that created them. They can access that account’s API checks and spend its API balance.

1Authorization: Bearer acx_YOUR_API_KEY

Create and revoke keys#

1. 1

   Open Dashboard → API → API keys.

2. 2

   Create a named key and copy it when shown.

3. 3

   To retire a key, revoke it in the dashboard and replace it wherever it was used.

Keep credentials on your server#

• Never put a key in browser JavaScript, published source code, or screenshots.
• Use separate keys for separate integrations so you can revoke one without disrupting the others.
• A missing, invalid, or revoked key returns HTTP 401. Replace the key before retrying.