Authentication
Call APIs with X-API-Key or Authorization Bearer.
When an API’s authentication type is api_key, include a key on every request.
Headers
Either header works:
curl -X GET 'https://api.blazesheets.com/v1/<api-id>' \
-H 'X-API-Key: bs_xxxx_yyyy'curl -X GET 'https://api.blazesheets.com/v1/<api-id>' \
-H 'Authorization: Bearer bs_xxxx_yyyy'Creating keys
In the console, open an API → Keys → create a key. The full secret is returned once. Store it securely; the console only shows the key prefix afterward.
Keys can optionally expire. Revoke a key by deleting it from the console.
Missing or invalid keys
Unauthenticated or invalid credentials return 401 UNAUTHORIZED.