Authentication
All API requests require authentication via a Bearer token in the Authorization header.
How Authentication Works
Authorization: Bearer YOUR_API_KEYCreating API Keys
- Log in to the Iteration Layer platform
- Navigate to API Keys
- Click Generate New Key
- Copy the key — it will only be shown once
API keys are scoped to a project and work across all APIs. Budget caps are set at the project level to limit credit consumption across all keys in that project.
How to Keep API Keys Secure
- Never expose API keys in client-side code
- Use environment variables to store keys
- Rotate keys regularly
- Set project budget caps to prevent runaway usage