Authentication

Every request must include your API key in the x-api-key HTTP request header. There is no OAuth flow or token exchange — pass the key directly on every call.

// Authentication Header
const headers = {
  "Content-Type": "application/json",
  "x-api-key": "uL6aLuwfcq1dUvEZTq3Gv2O0KgorNbYXXXXXXXX"
};

Security Best Practice: Never hard-code your API key in client-side or front-end code. Store it as an environment variable or in a secrets manager (e.g., AWS Secrets Manager, HashiCorp Vault) and inject it server-side at runtime.