Authentication
All API requests require authentication using API keys passed in the Authorization header.Using API Keys
Include your API key in the Authorization header:API Key Permissions
| Permission | Description |
|---|---|
| read | View quotes and transaction status |
| write | Create transactions and webhooks |
| admin | Full access including key management |
Rate Limits
| Tier | Requests/Minute | Monthly Quota |
|---|---|---|
| Free | 60 | 10,000 |
| Pro | 300 | 100,000 |
| Enterprise | 1,000 | 1,000,000 |
Security Best Practices
- Never commit API keys to version control
- Rotate keys regularly
- Use environment variables
- Implement key rotation strategy
- Monitor API usage for anomalies