Bearer Token
Include your API key in theAuthorization header on every request:
Security Checklist
Store keys in environment variables — never hardcode them
Use separate keys for dev, staging, and production
Rotate immediately if a key is compromised
Never commit keys to version control