Authentication & API Keys
Authentication is by API key. Each key is tied to your plan and its monthly limit, and every call you make is logged against the key, so you can see exactly where your usage comes from.
Creating a key
Create and manage keys in the developer portal at dev.numroq.com. You can create more than one key and give each a clear label (for example "production" and "staging") so they are easy to tell apart in the usage log.
Sending your key
Pass the key in the X-API-Key header on every request:
X-API-Key: your_api_keyTreat the key like a password. Keep it on your server side and never embed it in JavaScript or any code you ship to a browser, where anyone could read it.
Guest versus keyed access
Calls without a key work at a small guest limit so you can experiment before signing up. A key unlocks your plan's full monthly allowance and per-minute rate. For anything in production, always use a key.
What if my key is exposed?
Revoke it in the developer portal and create a new one. Because usage is tracked per key, you can also see whether it was used before you rotate it.
Can I use different keys per project?
Yes, and it is recommended. Separate keys make usage and security easier to manage across apps and environments.