Authentication

Secret API keys.

Every request needs a secret key in the Authorization header.

Authorization: Bearer sk_live_...

Create and revoke keys under Channels, API keys. The key is shown once, at creation; only a hash is stored, so a lost key must be replaced rather than recovered.

curl https://www.marketmind.skotechlabs.com/api/v1/usage \
  -H "Authorization: Bearer sk_live_..."

Scope

A key belongs to one workspace and can only ever see that workspace data. Every query is scoped automatically, so there is no way to read another workspace rows even by guessing an id.

Rate limits

Requests per minute are set by the plan (30 on trial, up to 600 on Agency). Over the limit you get 429 with a Retry-After header.

Errors

Every error has the same shape:

{
  "error": {
    "type": "invalid_request",
    "message": "An email or a phone number is required."
  }
}
Status Type Meaning
401 authentication_error Missing or invalid key.
403 plan_limit_reached The plan limit for this resource is used up.
404 not_found No such record in this workspace.
422 invalid_request Validation failed; fields lists what.
429 rate_limited Too many requests.