Authentication

Bearer keys. One key serves a whole team.

Authorization: Bearer sk_live_...

Keys belong to a workspace

Not to a person. Invite teammates and they share the workspace's key, quota and lists. We do not charge per seat — price moves with the number of technologies you watch, which is what tracks the value you get.

Rotation

Rotating issues a new key and revokes the previous one immediately. We store a SHA-256 hash, so a lost key cannot be recovered — only replaced.

Keys are prefixed sk_live_ so they are greppable in logs and recognisable to secret scanners. Never put one in a query string; the API only reads the header.

Errors

401 missing or revoked key · 403 request names more technologies than your plan covers · 422 technology has not passed the relevant audit.