GET /health) require authentication via a Bearer token in the Authorization header.
API Key Format
Keys are prefixed withtheo_sk_ for identification:
Making Authenticated Requests
Include the key in every request:Key Management
Create and manage keys from the API Dashboard or via the API:First-Run Diagnostic
If anything doesn’t work on the first call, run the SDK verifier before hunting through logs:Security Best Practices
- Store keys in environment variables or a secrets manager
- Use test keys (
theo_sk_test_) for development - Rotate keys regularly from the dashboard
- Set per-key rate limits and spending caps
