Skip to content

Authentication

Every request to the detection API carries a bearer key. Keys are created, scoped, and revoked from your account settings.

API access is not on sale yet.

The endpoint is live and these docs describe it accurately. Access belongs to the Pro plan, which we have not opened for purchase — so a key cannot be issued today, and these pages are here to be read rather than acted on. Free accounts have no API access, and requests from one are refused with a 403. Nothing here is a waiting list; there is simply nothing to join yet.

Bearer keys

Every request needs a bearer key in the Authorization header. Create and revoke keys at Settings → API keys.

Authorization: Bearer sk_live_...

Scopes

Keys are scoped; detection requests need the detect:write scope.

Rejected keys

A missing or invalid bearer key returns 401 with type authentication_error. The response carries the same envelope as every other failure — see Errors.

401 authentication_error
{
  "error": {
    "type": "authentication_error",
    "message": "Invalid or revoked API key"
  }
}