Skip to main content

Authentication

All Veris Labs API endpoints are served from a single base URL:

https://api.verislabs.io

Every request must include your API key in the X-Api-Key header:

X-Api-Key: YOUR_API_KEY

Getting an API key​

Keys live in the dashboard:

  • Account key - on the Overview page, charged to your balance.
  • Package keys - on the Packages page, one per package, limited to its products.

Quick check​

The easiest way to verify your key works is to call the Get Balance endpoint:

curl -H "X-Api-Key: YOUR_API_KEY" https://api.verislabs.io/balance

An account key returns your current balance in USD:

{"balance": 1.00}

A package key returns the package instead:

{
  "package": {
    "unlimited": false,
    "maxUses": 100000,
    "callsRemaining": 99000,
    "products": ["akamai_web_v3", "akamai_web_sbsd"],
    "expiresAt": "2026-11-24T12:00:00Z"
  }
}

If the header is missing or the key is unknown, the API returns 401 Unauthorized:

{"error": "account not found"}

See Errors and billing for the other responses.

Keeping your key safe​

  • Never embed the key in client-side code - mobile apps, browser JavaScript, or anything shipped to end users. Route requests through your own backend instead.
  • Don't commit the key to version control. Use environment variables or a secrets manager.

If you suspect your key has leaked, roll it in the dashboard.

SDK usage​

When using our Go SDK, pass the API key when constructing the client - the SDK attaches the X-Api-Key header to every request for you. See the SDK README for details.