API authentication

Key types

Every API request must include an X-API-Key header. There are two ways to get a key, and one of them needs no signup at all.

Temporary API keys

Temporary keys let you wire up the API without creating an account. Generate one from the homepage.

• Quota: 200 requests total
• Expires after 7 days
• Daily limit: 20 requests/day
• Max 3 keys per IP address
• Key prefix: tmpk_

$ curl -H "X-API-Key: tmpk_abc123..." \
    "https://apixies.com/api/v1/inspect-ssl?domain=github.com"

Registered API keys

Create a free account for higher limits and permanent keys. You manage them from the API keys dashboard.

• Daily limit: 75 requests/day
• No total quota cap. It resets daily.
• Keys are managed through Laravel Sanctum

$ curl -H "X-API-Key: YOUR_API_KEY" \
    "https://apixies.com/api/v1/inspect-email?email=test@example.com"

Rate limits

There are a few layers of rate limiting. They keep usage fair and the platform up.

Authentication errors

When authentication fails, the API returns a JSON error with a matching HTTP status code.

401 unauthorized

Returned when the API key is missing, invalid or expired.

{
  "status": "error",
  "code": "MISSING_AUTH",
  "message": "Missing API key. Include X-API-Key header.",
  "http_code": 401
}

Other 401 error codes:

INVALID_API_KEY

API key not found

INVALID_TEMP_KEY

Temporary key not found

TEMP_KEY_EXPIRED

Temporary key has expired

429 too many requests

Returned when any rate limit or quota is exceeded.

{
  "status": "error",
  "code": "DAILY_QUOTA_EXCEEDED",
  "message": "Daily request limit reached. Sign up for a free account for higher limits.",
  "daily_limit": 20,
  "http_code": 429
}

Other 429 error codes:

TEMP_KEY_QUOTA_EXCEEDED

Temporary key calls used up

RATE_LIMITED

Global rate cap exceeded, retry shortly

Request headers