API Keys

x-api-key: <YOUR_API_KEY>

One key is scoped to *your organisation*; rotate keys in **Dashboard → Settings → API Keys**.

Treat keys like passwords - do NOT embed them in client‑side code or mobile apps.