
API Key
Include your API key in theX-API-Key header of every request:
Base URL
Security Best Practices
Never expose your API key in client-side code
Never expose your API key in client-side code
Your API key should only be used in server-side code. Never include it in frontend JavaScript, mobile apps, or any code that runs on the client.
Use environment variables
Use environment variables
Store your API key in environment variables, not in your code.
.env
Rotate your key if compromised
Rotate your key if compromised
If you suspect your API key has been exposed, generate a new one immediately from the Dashboard. The old key will be invalidated.