Authentication - Quoin Data

Send your API key as a bearer token on every request:

curl "https://portal.quoindata.com/api/v4/catalog" \
  -H "Authorization: Bearer $QUOIN_KEY"

Managing keys

Create, rename and revoke keys in the developer portal. Give each application its own key so you can revoke one without affecting the others. A revoked key stops working immediately.

Keys are secrets. Keep them on your server or in a secret manager, never in browser code, mobile apps or public repositories. If a key leaks, revoke it in the portal and create a new one.

Failures

Status	Code	Cause
401	`invalid_key`	The header is missing, malformed, or the key was revoked
403	`not_entitled`	The account is suspended or a payment needs attention

Neither is charged.