Authentication
Project secret-key authentication for server integrations.
Send the project secret key as X-Api-Key or Authorization: Bearer sk_live_.... Secret keys belong only in your server environment. Browser dashboard requests use user JWTs and are a separate surface.
Never expose a secret key in frontend code, URLs, logs, or a public repository.