Authentication

The exit1.dev API uses API keys for authentication.

API Keys

Creating a Key

1. Navigate to Settings > API
2. Click Create API Key
3. Select the scopes you need (read, write, delete)
4. Copy the generated key immediately (it won’t be shown again)

You can create up to 2 API keys per account.

Key Format

API keys follow the format:

ek_live_<64 hex characters>

Example:

ek_live_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2

Using the Key

Include your API key in the X-Api-Key header with every request:

curl -H "X-Api-Key: ek_live_your_key_here" \
  https://us-central1-exit1-dev.cloudfunctions.net/publicApi/v1/public/checks

Scopes

API keys support three scopes that control what operations the key can perform:

• checks:read - Read checks, history, and stats (default)
• checks:write - Create, update, and toggle checks
• checks:delete - Delete checks

Keys created without specifying scopes default to read-only. See the Scopes page for details.

Revoking a Key

To revoke an API key:

1. Navigate to Settings > API
2. Click Revoke next to the key
3. Confirm the revocation

Revoked keys are immediately invalidated. Any requests using a revoked key will receive a 401 Unauthorized response.

Security Best Practices

• Never expose API keys in client-side code or public repositories
• Use environment variables to store API keys
• Rotate keys periodically
• Revoke unused keys immediately
• Each key has independent rate limits
• Only grant the scopes your integration actually needs