Authentication

Every request carries your virtual key in the Authorization header. Virtual keys are scoped and metered — create and revoke them in the dashboard.

Authorization: Bearer sk-...

Never ship the admin master key to a browser or client app — use a virtual key.