Authentication & Security
API Key Authentication
Required Header
X-BL-API-Key: your_api_key_here
API Key Management
- Store keys in environment variables
- Never hardcode API keys
- Rotate keys every 90 days
- Keep API keys secret
Security Best Practices
- Use environment variables
- Never commit keys to version control
- Implement key rotation
- Monitor unauthorized access attempts
- Use HTTPS only