Authentication

TokenGO uses API keys for authentication. Every API request must include your API key in the Authorization header.

API Key Format

Authorization: Bearer YOUR_API_KEY

Creating an API Key

1. Log in to the TokenGO Console
2. Navigate to API Keys in the sidebar
3. Click Create Key
4. Enter a name and configure quota settings
5. Set an expiration date or toggle Never Expire
6. Click Create — copy the key immediately, it will only be shown once

API Key Settings

When creating an API key, you can configure:

Security Best Practices

• Never commit API keys to code repositories — use environment variables instead
• Rotate keys regularly — create a new key, update your application, then delete the old one
• Use separate keys per environment — different keys for development, staging, and production
• Set quotas — limit key spending to prevent unexpected charges
• Set expiration dates — automatically disable keys after a set period
• Revoke compromised keys immediately — delete any key that may have been exposed

Error Handling

Authentication failures return a 401 status code:

{
  "error": {
    "type": "authentication_error",
    "message": "Invalid API key provided"
  }
}

Common causes:

• Missing or malformed Authorization header
• Expired or deleted API key
• Insufficient account balance

See Quick Start for step-by-step instructions on creating your first API key.