Authentication

Authenticate every request with a bearer key. Keys are scoped to one environment and one set of permissions.

Sending your key

bash

curl https://api.kibbe.ai/v1/trends \
  -H "Authorization: Bearer kb_live_9f4c2a1b…"

Key prefixes

Prefix	Environment	Notes
kb_sb_	Sandbox	Frozen sample catalog, 1,000 calls/day, safe for test configs.
kb_live_	Production	Real data, billed usage. Never expose in client-side code.
kb_rk_	Restricted	Live data, read-only. Cannot upload catalogs or create webhooks.

Rotation

Create the replacement key first, deploy it, then revoke the old one from the dashboard. Revoked keys fail with 401 immediately; there is no grace window.

A 401 with code key_revoked means the key exists but was revoked. A 401 with code key_unknown means we have never seen it — usually a copy-paste error.