Skip to main content
Every request must include your API key as a Bearer token in the Authorization header.

Managing keys

Create and manage keys in the dashboard under Account → API Keys. Each key:
  • Is scoped to a single store within your organization.
  • Attributes every generation it creates to that store.
  • Is rate limited independently — see Rate limits.
Keep keys secret — treat them like passwords. If a key leaks, delete it in the dashboard and create a new one. There is no rotation grace period.

Required state

The public API requires an active subscription. Requests from organizations without one return:

Error responses

See Errors for the full error envelope.