Reference · 03

Authentication

How API keys authenticate requests to the Decks Digital API.

Requests are authenticated with a bearer token in the Authorization header. Keys are scoped to an application or environment and inherit the account's model permissions and budgets.

cURL
curl https://api.decksdigital.ai/v1/models \
  -H "Authorization: Bearer YOUR_DECKS_API_KEY"

Handling credentials

  • Keep keys in backend infrastructure or a managed secret store
  • Never embed keys in browsers, mobile binaries or public repositories
  • Issue separate keys per application and environment
  • Rotate keys on a defined schedule and on personnel change