Authentication

Bearer API key authentication for all versioned endpoints.

Bearer token auth

Send your API key in the Authorization header:

Authorization: Bearer <API_KEY>

All /v1/* endpoints require this header.

API key formats

• Live keys: dq_live_...
• Test keys: dq_test_...

In self-hosted setups, any key stored in accounts.api_key is accepted.

Missing or invalid auth responses

Missing header

{
  "error": {
    "code": "unauthorized",
    "message": "Missing or invalid Authorization header"
  }
}

Invalid key

{
  "error": {
    "code": "unauthorized",
    "message": "Invalid API key"
  }
}