Authentication

All API requests are authenticated with a Bearer token:

Authorization: Bearer sk_snapany_xxx

API keys

• Create and manage keys at Console → API Keys. Up to 5 keys per account.
• Keys can be deleted at any time — that is how you rotate a leaked key.
• Each key's last-used time is shown in the console so you can identify stale keys.

If a key leaks

1. Create a new key and switch your services to it.
2. Delete the leaked key — it stops working immediately.
3. Check Usage for unexpected consumption.

Rate limits

1200 requests per minute per key. Exceeding it returns HTTP 429 with code RATE_LIMITED — back off and retry.