API Key Authentication
All Nonce Private API requests require authentication using an API key passed in the request header.Header Format
You can authenticate using either of the following header formats: Option 1: x-api-key headerObtaining an API Key
API keys are currently available by contacting the Nonce platform administrator. Please reach out to [email protected] to request access.Authentication Errors
| Status Code | Error | Description |
|---|---|---|
| 401 | Unauthorized | Missing x-api-key header |
| 401 | Unauthorized | Invalid or expired API key |
| 403 | Forbidden | API key does not have permission for this resource |
Example Error Response
Security Best Practices
- Never expose your API key in client-side code
- Store API keys in environment variables
- Rotate your API keys periodically
- Use separate API keys for different environments (development, production)