​

Authentication

The Truly API uses API keys for authentication. Include your API key in all requests using the Authorization header.

​

API Key Header

Authorization: Bearer YOUR_API_KEY

​

Security Best Practices

• Store API keys securely using environment variables
• Never expose API keys in client-side code or public repositories
• Rotate API keys periodically
• Use separate API keys for development and production

​

Rate Limiting

• 100 requests per minute per API key
• Rate limit headers are included in responses
• Contact us to discuss higher rate limits

​

Error Responses

{
"error": "Unauthorized",
"message": "Invalid or missing API key",
"status": 401
}