Administration · API keys

API keys

Authenticate every request with the X-API-Key header.

Create a key

Generate keys at you.com/platform. Each key is scoped to one project.

Shell
curl -H "X-API-Key: $YOU_API_KEY" "https://chat-api.you.com/search?query=hello"

Don't commit keys

Use environment variables or a secret manager. Anyone with the key can spend your quota.

Rotate a key

  • Generate a new key.
  • Deploy it to all clients.
  • Revoke the old key once traffic is fully migrated.

Revoke a key

Revocation is immediate. In-flight requests with the old key will receive 401.