5 min read
Create a key
Open Settings, then API keys, and create a key. The full key is shown once — store it in your own secret manager. Only a hash is retained, so a lost key must be rotated rather than recovered.
Make a request
Send the key in the Authorization header as a bearer token. Every request is scoped to the tenant that owns the key; there is no way to read another tenant's data with it.
Errors and limits
Requests are rate limited per key. A 429 response includes a retry hint — back off exponentially rather than retrying immediately. Validation failures return 400 with a field-level description of the problem.