Authentication

Every protected Eazip API request carries a secret API key in the X-API-Key header. Create and revoke keys in your dashboard.

Getting an API Key

Sign in to your Eazip dashboard
Navigate to API Keys in the sidebar
Click Create API Key
Give your key a descriptive name
Copy the key immediately (it won't be shown again)

Using Your API Key

curl https://api.eazip.io/jobs \
  -H "X-API-Key: YOUR_API_KEY"

Authorization: Bearer ... is reserved for dashboard session JWTs; the public API uses X-API-Key.

API Key Best Practices

Security Tips

Never expose API keys in client-side code
Use environment variables to store keys
Rotate keys periodically
Use separate keys for development and production

Environment Variables

export EAZIP_API_KEY="your_api_key_here"

Then reference it in requests:

curl https://api.eazip.io/jobs \
  -H "X-API-Key: $EAZIP_API_KEY"

In Your Code

Node.js:

const response = await fetch('https://api.eazip.io/jobs', {
  headers: {
    'X-API-Key': process.env.EAZIP_API_KEY,
    'Content-Type': 'application/json',
  },
});

Python:

import os
import requests

response = requests.get(
    'https://api.eazip.io/jobs',
    headers={'X-API-Key': os.environ["EAZIP_API_KEY"]}
)

Managing API Keys

From the dashboard you can:

View all active keys
Revoke keys that are no longer needed
Create new keys for different environments

Error Responses

Failed authentication returns 401 Unauthorized:

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or expired API key"
  }
}

Common causes:

Missing X-API-Key header
Invalid API key
Revoked API key
Expired API key