# Authentication

> Authenticate with your API key

Source: https://platform.snapany.com/docs/authentication

All API requests are authenticated with a Bearer token:

```
Authorization: Bearer sk_snapany_xxx
```

## API keys

- Create and manage keys at [Console → API Keys](https://platform.snapany.com/console/keys). Up to 5 keys per account.
- Keys can be **deleted** at any time — that is how you rotate a leaked key.
- Each key's last-used time is shown in the console so you can identify stale keys.

## If a key leaks

1. Create a new key and switch your services to it.
2. Delete the leaked key — it stops working immediately.
3. Check [Usage](https://platform.snapany.com/console/usage) for unexpected consumption.

## Rate limits

1200 requests per minute per key. Exceeding it returns HTTP `429` with code `RATE_LIMITED` — back off and retry.