AUTHENTICATION

API credentials

Credentials identify one purpose and never expand ownership.

Application requests

Send both headers. The API Key identifies the credential; the API Secret proves possession and is displayed only when issued.

X-API-Key: hapk_YOUR_KEY_ID
X-API-Secret: YOUR_API_SECRET

If the secret is unavailable, rotate it through Developer Tools and update your application. Read APIs never return it.