Skip to main content
Thiqwave authenticates requests using API keys. You pass your key in the X-API-Key header on every request.

​
Get your API key

  1. Log in to console.thiqwave.com
  2. Navigate to Settings → API Keys
  3. Click Create New Key
  4. Copy the key and store it somewhere safe — it is only shown once
Never share your API key, hardcode it in source files, or commit it to version control. Treat it with the same care as a password.

​
Pass the key in requests

Include your API key as the X-API-Key header in every request.
Store your key in an environment variable (e.g. THIQWAVE_API_KEY) and read it at runtime. Never hardcode it directly in your application code.

​
Key rotation

Rotate your API keys regularly to reduce the risk of a compromised credential causing lasting damage. To rotate a key:
  1. Create a new API key in Settings → API Keys
  2. Deploy your application with the new key
  3. Delete the old key once your deployment is confirmed healthy
You can have multiple active API keys simultaneously, so you can rotate without downtime. Use separate keys for development, staging, and production environments.

​
Rate limits

API keys are subject to per-minute and per-second request limits. See Rate Limits for current limits and best practices for handling 429 responses.

​
Authentication error codes

If you receive a 401 and you are sure your key is correct, check that there are no extra spaces or newline characters around the key value.