Skip to main content

Authentication

All endpoints require a bearer token, passed in the Authorization header:

Authorization: Bearer <YOUR_API_KEY>

Requests with a missing or unrecognized token are rejected with 401 Unauthorized.

Keep your key server-side

Treat the API key like a password. Don't embed it in browser code or commit it to a repo. Call /launch from your backend and have your frontend talk to your backend instead. See the proxy pattern in the Quickstart.

Checking a key​

Use GET /verify to confirm a key is valid without launching a session:

curl -i https://agents.api.respeecher.com/verify \
  -H "Authorization: Bearer $RESPEECHER_AGENTS_API_KEY"
# HTTP/1.1 200 OK
# {"ok":true}