Docs · Authentication
Authentication
Every request needs an API key. Create and revoke keys in the dashboard. A revoked key stops working immediately.
Bearer token (recommended)
Header
curl "https://api.gridlode.com/v1/account" \
-H "Authorization: Bearer sk_live_..."Query parameter
For tools that can't set headers, and for drop-in compatibility with other SERP APIs, you can pass api_key in the query string. Avoid this in browsers: URLs end up in logs and history.
Query
curl "https://api.gridlode.com/v1/domain/rdap?domain=example.com&api_key=sk_live_..."Check your balance
GET /v1/account returns your available and held credits. It costs nothing.
Keeping keys safe
- Create one key per application so you can revoke one without breaking the others.
- Store keys in environment variables or a secrets manager, never in source control.
- We only store a hash of each key. If you lose one, revoke it and create a new one.