Authentication & Security
Importly uses API keys for authentication.
API Key
- Header: Include
Authorization: Bearer <YOUR_API_KEY>
in every request. - Obfuscation: Store the key securely (e.g., server environment variable). Do not expose it in client-side code.
- HTTPS Only: Always use TLS to avoid leaking credentials.
Rotating or Revoking Keys
If you suspect a key leak or need to rotate keys periodically for security:
- Generate a new key in your Importly.io Dashboard.
- Update your applications to use the new key.
- Revoke the old key once it's no longer in use.