Authentication uses an API key. Send the key as a Bearer token on every REST API or MCP request.
Create a key
- Sign in to the API keys page.
- Click Create API key.
- Give the key a name that identifies its environment or application.
- Copy the key and store it in your secret manager.
The legacy x-api-key header also works for REST requests, but Bearer authentication is recommended.
Never expose an API key in browser code, mobile app bundles, public logs, or source control. Revoke a key from the dashboard if it may have been exposed.
Authentication errors