API key authentication
Every /api/v1 endpoint requires the X-API-Key header. Keys never belong in a query string.
Required header
X-API-Key: fna_live_••••••••.•••••••••••••••••••••••••••••••••••••••••••The dashboard cannot recover a lost secret: only its HMAC digest is stored. Create and deploy a new key, then revoke the old one.
Response without a key
HTTP/1.1 401 Unauthorized
Content-Type: application/problem+json
X-Request-ID: req_…
{
"type": "https://fenua-api.pacificknowledge.dev/problems/missing-api-key",
"title": "API key required",
"status": 401
}