Skip to main content

Overview

PCX authenticates server-to-server requests using API keys. Both headers must always be present. Send your API key in X-Api-Key. The Authorization header must always be sent with the literal string value NONE.
Sending only one header, or omitting the unused header entirely, will result in a 401 Unauthorized response.

API key authentication

Send your API key in X-Api-Key and set Authorization to the literal string NONE.
Generate keys from Dashboard → Settings → API Keys.
Never expose API keys in client-side code or public repositories. Rotate immediately if compromised.

Errors