Authentication

All API requests require an API key. Pass it in either the X-API-Key header or the Authorization header.

Creating a key

Generate keys in the dashboard. Keys follow the format gs_live_<48 hex chars>. The full key is shown only once at creation time — store it securely.

Using the key

# X-API-Key header (recommended)
curl -H "X-API-Key: gs_live_..." https://api.gitstrology.dev/v1/moon-phase

# Bearer token
curl -H "Authorization: Bearer gs_live_..." https://api.gitstrology.dev/v1/moon-phase

Security

• Keys are stored as SHA-256 hashes — the raw key cannot be recovered.
• Never commit keys to git. Use environment variables.
• Revoke compromised keys immediately in the dashboard.
• Use separate keys per environment (dev, staging, prod).