Authentication

Authenticate AdLib API requests with an API key in the X-API-Key header, and manage keys per team in the dashboard.

Send your key in the X-API-Key header on every request:

Shell

curl "https://api.adlibapi.com/v1/status" -H "X-API-Key: $ADLIB_API_KEY"

A missing or invalid key returns 401 with the code unauthorized.

Keys

Create and revoke keys in the dashboard under Keys. A key is shown once when you create it; we only store a hash. Create one key per service or team, so you can revoke one without touching the others. Usage is counted per account, so all keys share your plan's credits and rate limit.

Keep keys secret

Call the API from your backend, not from a browser or mobile app.
Keep keys out of source control; use environment variables or a secret manager.
If a key may have leaked, revoke it in the dashboard and create a new one.

AI agents

The hosted MCP server signs in with your AdLib account through OAuth, so you don't paste a key into an AI client. Clients that can only send a header can use X-API-Key there too. See MCP for AI agents.