> ## Documentation Index
> Fetch the complete documentation index at: https://docs.routeur.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Send your key with every request.

Send your key in the `X-API-Key` header:

```bash theme={null}
curl https://api.routeur.app/v1/status -H "X-API-Key: $ROUTEUR_API_KEY"
```

or as a bearer token:

```bash theme={null}
curl https://api.routeur.app/v1/status -H "Authorization: Bearer $ROUTEUR_API_KEY"
```

Keys look like `rk_live_<12-character id>_<43-character secret>`. Routeur stores only a hash of the secret, so a lost key cannot be shown again; ask for a new one and the old one can be revoked.

<Warning>
  Keep keys on your server. A key in a browser, a mobile app or a public repository can be read by anyone and used against your quota.
</Warning>

| Status | Code               | When                             |
| ------ | ------------------ | -------------------------------- |
| 401    | `api_key_required` | No key was sent.                 |
| 401    | `invalid_api_key`  | The key is malformed or unknown. |
| 401    | `api_key_revoked`  | The key was revoked.             |