Authentication

​

API Key Authentication

​

Header format

Authorization: Bearer af_live_<key>

Authorization: Bearer af_test_<key>

​

Key types

​

Creating an API key

1. Go to Dashboard → API Keys
2. Click Create API key
3. Choose environment (test or live)
4. Copy the key immediately — it will not be shown again

​

Storing your key

export ATLASFLUX_API_KEY="af_live_YOUR_KEY_HERE"

// Server-side only
const apiKey = process.env.ATLASFLUX_API_KEY;

​

Key rotation

1. Go to Dashboard → API Keys
2. Delete or revoke the compromised key
3. Create a new key
4. Update your application with the new key

​

Revoked or invalid keys

{
  "error": {
    "message": "Invalid or missing API key.",
    "type": "authentication_error",
    "code": "invalid_api_key"
  }
}

​

Rate limits

• x-ratelimit-limit — Maximum requests per window
• x-ratelimit-remaining — Remaining requests
• x-ratelimit-reset — Unix timestamp when the window resets