Skip to main content

Current status

Authentication requirements will be documented when public API access is released.

Principles

  • Never place API keys in client-side public code.
  • Rotate exposed credentials.
  • Use least-privilege access.
  • Document rate limits and scopes.