Authentication

Every request is authenticated with your secret API key in the Authorization header, as a bearer token. Keys begin with fk_live_.

Authorization: Bearer fk_live_your_key_here

Get your keyCopy Anchor Link

Open Dashboard, then Developers, and generate an API key. Your key is shown once, at creation, and only its hash is stored on our side, so we can never show it to you again.

Keep it safeCopy Anchor Link

• Treat it like a password: keep it on your server, never commit it to a repo, and never ship it in a browser or mobile app where a user could read it.
• If a key leaks, revoke it in the dashboard and generate a new one, revoking takes effect immediately.
• You can hold several keys at once (for example one per environment) and rotate them independently.