Get started/3 of 24

Authentication

Bearer API keys, HTTPS, and how to keep keys off clients.

Send your API key in the Authorization header as a bearer token. Keys start with csk_live_. All requests must use HTTPS.

Self-serve keys come from the dashboard and share the website plan. White-label keys are issued by us — see White label.

Keep keys secret. Only use them on your server, never in browser or mobile app code. If a key leaks, revoke it and create a new one.

curl https://api.comprestack.com/api/v1/usage \
  -H "Authorization: Bearer csk_live_••••••••••••a91f"