Authentication
Authenticate EasyAPI requests with a Bearer token in the Authorization header: header format, API key security best practices and 401 / 403 error responses.
Every API request must include a Bearer token in the Authorization header.
Header format
Authorization: Bearer YOUR_API_KEY
Security recommendations
- Never hard-code API keys in client apps (browsers, mobile apps)
- Use separate tokens for each environment (development / staging / production)
- Rotate keys regularly and revoke leaked tokens in the console
Error responses
| HTTP status | Error code | Description |
|---|---|---|
401 | invalid_api_key | Missing or invalid API key |
403 | forbidden | The token is not allowed to access this resource |
See Error Codes and Status Codes for details.