API authentication

Send your API key in the Authorization header of every request:

Authorization: Bearer YOUR_DIVYAM_API_KEY
Content-Type: application/json

Use the complete key, which starts with divyam-sw-v1-. The masked hint on the API Keys page can't authenticate a request.

Console versus API credentials

Your email sign-in code opens the console in your browser. Your application uses an API key. They aren't interchangeable.

Secret handling

Read the key from a server-side environment variable or secret store. Don't put it in a public frontend bundle, query string, analytics event or error report.

If a key leaks, rotate it. For a rejected key, see authentication errors.