Authentication

Every request is authenticated with an API key sent as a Bearer token in the Authorization header.

Authorization: Bearer JACKZ_API_KEY

Keys

• · Create, label and revoke keys from the console.
• · Keys are shown once at creation — store them like passwords.
• · Use separate keys per app or environment so a leaked key can be revoked without taking everything down.
• · Never ship a key in client-side code or a public repository.

Balance

Calls are billed per token against your prepaid balance at list price. When the balance reaches zero, requests return 402 until you top up again.