The Verto API uses API key authentication passed via an HTTP request header.
Authorization header Include your API key in the Authorization header: Authorization: Bearer YOUR_API_KEY
All API requests must be made over HTTPS.
⚠️ Warning: Never pass your API key as a query parameter -- it will be logged in server access logs. |
Key rotation Rotate your API keys periodically. Generate a new key, update your app config, verify it works, then revoke the old key.
💡 Tip: Use a zero-downtime rotation strategy: deploy the new key alongside the old one, confirm all calls succeed, then revoke. |
Related articles: