Skip to main content
Create a key in API keys on the SAN platform. Keys begin with san_ and are shown only once. Store the key as SAN_API_KEY in your server environment or secret manager. Attach it to every public API request:
You can use X-Api-Key: <SAN_API_KEY> instead. Choose one header; query-string keys are unsupported. See the quickstart for a complete request. Keep keys out of browser code, prompts, and URLs. Use separate named keys for applications; all keys on an account share its quota. A missing, invalid, or revoked key returns 401 unauthorized. Check your header and environment variable. If a key is lost or exposed, create a replacement, update your application, and revoke the old key. See Manage API keys.