Authentication

The AltiviaCloud API uses API keys to authenticate requests.

API Keys

API keys are prefixed with ac_live_ and can be passed in two ways:

Bearer Token (recommended)

HTTP
Authorization: Bearer ac_live_YOUR_API_KEY

X-API-Key Header

HTTP
X-API-Key: ac_live_YOUR_API_KEY

Security

  • Never expose API keys in client-side code or public repositories
  • Rotate keys periodically from the dashboard
  • Use separate keys for development and production
  • Revoke compromised keys immediately

Rate Limits

API requests are limited to 120 requests per minute per API key. Exceeding this limit returns a 429 Too Many Requests response.

Errors

All errors follow a consistent format:

JSON
{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or missing API key"
  }
}