Skip to main content

​
API Key authentication

Every request to the Rushed API requires an API key sent via the X-API-Key header.

​
Getting your API key

  1. Sign in to the Rushed Dashboard
  2. Navigate to API Keys
  3. Click Create Key
  4. Configure the key name, expiration, and scopes
  5. Copy the key — it will only be shown once

​
Key format

​
Key scopes

When creating an API key, you can restrict its access to specific resources: A key with no explicit scopes defaults to * (full access within your plan tier).

​
Key expiration

You can set an expiration when creating the key:
  • No expiration — key is valid until manually revoked
  • Custom duration — 30 days, 90 days, 1 year, or a specific date
  • Expired keys return 401 Unauthorized

​
Rate limits by plan

Rate limits are enforced per API key: See Rate Limits for details on headers and backoff strategies.

​
Key rotation

To rotate a key without downtime:
  1. Create a new key in the dashboard
  2. Update your application to use the new key
  3. Verify the new key works
  4. Revoke the old key
Never commit API keys to source control. Use environment variables or a secrets manager.

​
Error responses