Authentication

Pass your server-side API key in the Authorization header.

Authorization: Bearer YOUR_AVENRIX_API_KEY
Content-Type: application/json

Never expose a key through a NEXT_PUBLIC_ variable. Use separate credentials per environment, restrict access, and rotate a suspected compromised key through the console. Ask support about available enterprise key-scoping controls.

Handling a failed request

A 401 normally indicates missing or invalid credentials. Verify the key and header before retrying. Contact support with a request identifier, never the secret key itself.