API Keys
API keys authenticate server-to-server requests to AstroAPI.
They are required for all /api/astro/* endpoints.
Primary API Key
Use this key in your backend services to call AstroAPI. No login or session is required.
Keep this key secret. Never expose it in frontend JavaScript, public repositories, or client-side apps. Rotate the key immediately if it is ever leaked.
How API keys work
API keys authenticate requests to
/api/astro/*.They identify your account, not an individual user.
Usage limits and billing are enforced server-side.
A secure browser session is used only for this dashboard.
Best practices
Store keys in environment variables or a secrets manager.
An account currently has one active key; regeneration immediately revokes the previous key.
Rotate keys regularly and after any suspected compromise.