Authentication
Authenticate requests with secret API keys.
Every request to the AbuseZero API needs a secret key in the Authorization header.
Authorization: Bearer az_live_8d1f0c3b5e2aKey types
Prop
Type
Never ship a secret key (az_live_ or az_test_) to the browser or a mobile app. Anyone with the key can run checks on your account.
Rotating keys
Create a new key
In the dashboard, open Settings → API keys and create a second key.
Deploy it
Update ABUSEZERO_API_KEY in every environment and redeploy.
Revoke the old key
Requests using a revoked key fail with 401 unauthorized immediately.
How is this guide?
Edit on GitHub
Last updated on