API Key Authentication
All requests to the ThreeTone API require authentication using an API key. The API key must be included in the request headers.Header Format
Include your API key in thex-api-key header:
Getting Your API Key
1
Sign Up
Create an account at
dashboard.threetone.com
2
Navigate to API Keys
Go to Settings → API Keys in your dashboard
3
Generate New Key
Click Create New API Key and give it a descriptive name
4
Copy and Store
Copy your API key immediately - it will only be shown once!
Example Request
Here’s how to include authentication in your API requests:Authentication Errors
If authentication fails, you’ll receive a401 Unauthorized response:
Common Issues
- Missing API key: Ensure the
x-api-keyheader is included - Invalid API key: Verify your key is correct and hasn’t been revoked
- Expired API key: Generate a new key if yours has expired
Best Practices
Environment Variables
Environment Variables
Store API keys in environment variables instead of hardcoding them:
bash export THREETONE_API_KEY="your_api_key_here" Key Rotation
Key Rotation
Regularly rotate your API keys for enhanced security. You can have multiple
active keys during transition periods.
Scope Limitation
Scope Limitation
Use different API keys for different environments (development, staging,
production) to limit potential exposure.
Need help with authentication? Contact our support team at
[email protected]

