Skip to main content
News API uses API key authentication. Include your API key in the x-api-token header on every request:
An invalid or missing key returns a 401 Unauthorized response. See Errors for details.

Authentication example

Security best practices

Follow these practices to keep your API key secure:
  • Never expose your API key in client-side code, public repositories, or anywhere accessible to unauthorized parties.
  • Store your API key in environment variables or a secrets manager, not in source code.
  • Rotate your API key periodically.
  • Monitor your usage to detect unauthorized access early.
  • If you suspect your key has been compromised, contact support immediately to have it revoked and replaced.

See also

For related topics, see the following resources: