Skip to main content

Authentication

The RotaStellar API uses API keys for authentication. All requests must include a valid API key.

Getting an API Key

1

Request Access

Sign up for early access to receive your API credentials.
2

Receive Credentials

You’ll receive an email with your API key (starts with rs_).
3

Store Securely

Store your API key securely. Never commit it to version control.

Using Your API Key

Include your API key in the Authorization header with the Bearer prefix:

Example Request

API Key Types

Test keys have rate limits and may return simulated data. Use live keys for production applications.

Security Best Practices

API keys should only be used in server-side code. Never include them in JavaScript bundles, mobile apps, or anywhere users can inspect.
Store API keys in environment variables, not in code:
Rotate your API keys periodically and immediately if you suspect compromise.
Use different API keys for development, staging, and production.

Revoking Keys

If your API key is compromised:
  1. Go to your dashboard
  2. Navigate to API Keys
  3. Click “Revoke” on the compromised key
  4. Generate a new key
  5. Update your applications

Errors