Authentication & Security

Importly uses API keys for authentication.

API Key

  • Header: Include Authorization: Bearer <YOUR_API_KEY> in every request.
  • Obfuscation: Store the key securely (e.g., server environment variable). Do not expose it in client-side code.
  • HTTPS Only: Always use TLS to avoid leaking credentials.

Rotating or Revoking Keys

If you suspect a key leak or need to rotate keys periodically for security:

  1. Generate a new key in your Importly.io Dashboard.
  2. Update your applications to use the new key.
  3. Revoke the old key once it's no longer in use.