Skip to main content

​
How do I authenticate API requests?

Pass your API key as a bearer token:

​
Where do I get an API key?

Create and manage keys in the Dashboard.

​
Should I put the API key in client-side code?

No. Treat API keys as secrets. Keep them on your server, in environment variables, or in a secret manager.

​
Can I use an environment variable?

Yes. For local scripts:
The LinkModel CLI can also read LINKMODEL_API_KEY.

​
What should I do if a key leaks?

Rotate the key immediately from the Dashboard, update your deployment secrets, and remove the leaked key from logs or repositories.