Authentication
ProofRails uses API keys for API access.
X-API-Key: <your_project_api_key>
API keys can be scoped to a project. Admin keys may be able to access cross-project and analytics surfaces depending on deployment configuration.
Create a project
POST /v1/projects/register
Manage keys
POST /v1/auth/api-keys
GET /v1/auth/api-keys
DELETE /v1/auth/api-keys/{id}
Security guidance
- Do not ship API keys in client-side code.
- Store server-side keys in environment variables or a secret manager.
- Rotate exposed keys immediately.
- Use separate keys for development, staging, and production.