Authentication

All API requests must include an API key. You can generate keys from Settings → API keys. Keys are shown once at generation — store them securely.

Two header formats are accepted — use whichever fits your stack:

# Option 1 — standard Authorization header
Authorization: Bearer pk_live_...

# Option 2 — custom header
x-parlance-key: pk_live_...

Requests without a valid key return 401 Unauthorized. Requests with a key that lacks permission for the resource return 403 Forbidden.