API authentication

Every request carries your API key as a Bearer token. There are no sessions, no OAuth dance and no expiry to handle.

http header

Authorization: Bearer scarnox_YOURAPIKEY

Key format

scarnox_[20 alphanumeric]

e.g. scarnox_aB3xZ9mQ1rK7vN4wY2pL

Treat the key like a password

Never ship it in client-side code or commit it to a repository. Anyone holding the key can spend your balance. Rotate it from the dashboard if it leaks — the old key stops working immediately.

401 responses

A missing, malformed or revoked key returns401 Unauthorizedwith a detail field — handle it separately from solve errors, which return HTTP 200 with an errorId.

PreviousIntroduction NextQuickstart