Authentication

1. Authentication Scheme

This Open API uses a project-level API key.
Send the following header on every request:

Header: x-api-key

Value: <YOUR_PROJECT_API_KEY>

Example:

{
  "error": true,
  "code": 401,
  "message": "x-api-key header is required"
}

{
  "error": true,
  "code": 401,
  "message": "Invalid project API key"
}

{
  "error": true,
  "code": 403,
  "message": "Project API key is not active"
}

{
  "error": true,
  "code": 401,
  "message": "Project API key has expired"
}

Do not expose x-api-key directly in browser/front-end code.

Do not log full API keys (log only masked prefixes/suffixes).