Authentication

​

Authentication methods

​

Bearer token (recommended)

Authorization: Bearer cur_live_xxxxxxxxxxxx

​

API key header

X-API-Key: cur_live_xxxxxxxxxxxx

​

Full example

curl -X POST https://api.getcurrent.ca/v1/search \
  -H "Authorization: Bearer cur_live_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"name": "Acme Corp"}'

curl -X POST https://api.getcurrent.ca/v1/search \
  -H "X-API-Key: cur_live_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"name": "Acme Corp"}'

​

Security best practices

• Store keys in environment variables, not hardcoded in source files
• Use secrets managers (AWS Secrets Manager, HashiCorp Vault, Vercel env vars) in production
• Rotate keys immediately if you suspect compromise — generate a new key on the API Keys page

​

Error responses

{ "error": "Invalid API key" }