Get Started

Authentication

Every request is authenticated with the x-api-key header — a single custom header, not a bearer token.

Your API key

Create a key in the dashboard under Settings → API Keys. The key is shown only once at creation, so store it somewhere safe. Usage and billing are tracked per project, based on the key you send.

Authenticating requests

Include your key on every request:

Authenticated request

curl "https://api.netflix.developers.gaudiolab.io/v1/models" \
  -H "x-api-key: $API_KEY"

Quota headers

Authenticated API responses include quota and PoC expiry headers so you can show remaining processing time in your own tools without making an extra dashboard request.

Response headers

X-Quota-Limit-Minutes: 10000.00
X-Quota-Used-Minutes: 12.34
X-Quota-Remaining-Minutes: 9987.66
X-Quota-Usage-Percent: 0.12
X-PoC-Expires-At: 2026-07-15T00:00:00Z

Keep your key secret

Never expose your API key in client-side code or a public repository. Keep it in a server-side environment variable or a secrets manager, and rotate it immediately if it leaks.

Authentication errors

A missing or invalid key returns HTTP 401 with a structured error object. Errors always include a machine-readable code and a human-readable message.

401 response

// 401 — missing or invalid key
{
  "code": "UNAUTHORIZED",
  "message": "Missing or invalid x-api-key header."
}