Skip to main content
The Bila API authenticates requests via API keys. Manage your keys in the Bila Console.

Key Types

Never share API keys in client-side code, public repositories, or anywhere accessible without authentication.

Making Authenticated Requests

Include your API key in the x-api-key header with every request:

Authentication Errors

Failed authentication returns a 401 response:

Common Authentication Issues

Best Practices

Use environment variables or a secrets manager to store your API keys. Never hardcode them in your source code.
Use test keys (sk_test_) for development and live keys (sk_live_) for production.
Regularly rotate your API keys as a security best practice.
If available, create keys with only the permissions your application needs.