Authentication

All APIs require an API key sent in the x-api-co-id header.

Example:

curl "<endpoint>" \
  -H "x-api-co-id: YOUR_API_KEY"

Notes:

• Keep keys secret; rotate them regularly.
• Unauthorized calls return 401 with a message like User not authenticated.
• Some paid endpoints may return 402 if your balance is insufficient.