Authentication
RateShield uses API keys to authenticate requests. You can view, manage, and regenerate your API keys from the Dashboard.
Passing API Keys
For configuration requests like setting rate limits, pass your API key via the standard Authorization header using the Bearer schema.
Authorization: Bearer <your-api-key>Warning: Keep your API key secure. Do not expose it in client-side code such as front-end JavaScript or in public code repositories.
Validating Requests
If an invalid or missing API key is provided, the API will return a 401 Unauthorized response.