Authentication

Every request authenticates with an API key sent as a Bearer token:

Authorization: Bearer sk_live_your_key

Getting a key

Create keys in the API section of the SEO Checker dashboard. Each key belongs to your organization — all usage and credits are billed to that organization.

The full key (sk_live_…) is shown once, at creation. Store it somewhere safe; we only keep a hash and can’t show it again. If you lose it, revoke it and create a new one.

Keeping keys safe

• Treat a key like a password. Never commit it or expose it in client-side code.
• Read it from an environment variable or secret store at runtime.
• Rotate keys periodically: create a new one, migrate, then revoke the old.

Revoking

Revoke a key from the dashboard at any time. A revoked key immediately returns 401 with code apikeys.invalid.

Errors

Status	Code	Meaning
401	apikeys.missing	No Authorization header.
401	apikeys.invalid	Unknown or revoked key.

See Errors for the full catalog.