> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cr3dentials.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate every Partner API request with your API key.

All Partner API endpoints require authentication with your partner API key.

## API key header

```
x-api-key: your_api_key_here
```

Alternatively, use the `Authorization` header:

```
Authorization: Bearer your_api_key_here
```

All requests with a body must also include:

```
Content-Type: application/json
```

## Response envelope

Every successful response is wrapped in a standard envelope:

```json theme={null}
{
  "status": "success",
  "data": { }
}
```

Error responses return the appropriate HTTP status code with details in the body:

```json theme={null}
{
  "statusCode": 401,
  "message": "Unauthorized"
}
```

## Managing keys

<Warning>
  Treat your API key like a password. Never expose it in client-side code or commit it to source control.
</Warning>

API keys can be rotated at any time from your [dashboard](https://app.cr3dentials.xyz). Rotating a key immediately invalidates the previous one.