Authentication

Send your API key as a Bearer token on every call. Keys start with rc_.

Send your key in the Authorization header:

TEXT
Authorization: Bearer rc_...
  • A missing, malformed or revoked key returns 401 invalid_api_key.
  • Call the API from your server. Browser calls from sites that aren't allowed return 403 origin_not_allowed.
  • Rotate a key from the dashboard. The old key stops working at once.