Authentication

All requests are authenticated with a bearer API key sent in the Authorization header.

Bearer tokens

Include your API key in the Authorization header of every request. Never expose keys in client-side code or public repositories.

Authorization: Bearer tk_live_a91f...

Key prefixes

Keys are prefixed so you can tell environments apart at a glance:

  • tk_live_ — production keys, real usage and billing.
  • tk_test_ — sandbox and staging keys, no billing.

Rotating keys

Rotate keys from the API Keys page. Rotation issues a new secret and keeps the old one valid for a 24-hour grace period so you can deploy without downtime.

Example

auth.py
import os, requests

r = requests.post(
    "https://api.tuerss.dev/v1/handle-lookup",
    headers={"Authorization": f"Bearer {os.environ['TUERSS_KEY']}"},
    json={"handles": ["@builder", "@maker"]},
)
print(r.json())