Skip to content
ToolsOnDuty - free online tools
Browse documentation

Docs / Start

Authentication

Every public API request requires a personal key in the HTTP Authorization header.

Create an API key

  1. Create a free developer account and verify your email address.
  2. Sign in and open your developer dashboard.
  3. Create a labeled key and copy it immediately. The full value is shown once.

Free accounts may have two active keys. Both keys share the account's 100 monthly credits; creating a second key does not create another credit allowance.

Send the bearer token

Include the key on every call. Query-string keys are not accepted because URLs are commonly stored in logs and browser history.

Authorization: Bearer <your-api-key>

Keep keys secure

  • Store keys in environment variables or a managed secret store.
  • Never commit keys, embed them in browser JavaScript, or include them in screenshots.
  • Use separate labels and keys for separate applications or environments.
  • Revoke an exposed key immediately and create a replacement.

Key and credit errors

CodeMeaningAction
MISSING_KEYNo bearer token was supplied.Add the Authorization header.
INVALID_KEYThe key is malformed, revoked, or unavailable.Check the key or create a replacement.
RATE_LIMITEDThe shared requests-per-minute limit was exceeded.Wait for the Retry-After interval before retrying.
INSUFFICIENT_CREDITSThe shared monthly account balance is too low.Wait for the next UTC month; paid plans are coming soon.