Authentication

API Key

Every request to the Submito submission endpoint must include your API key in the request header.

x-api-key: your-api-key

Where to find your API key

Go to your dashboard
Navigate to the API Key section
Click Generate key if you haven’t already
Copy the key — it is shown in full only once

If you lose your API key, you can revoke it and generate a new one. Your existing quota count will be preserved.

Example

curl -X POST https://submito.dev/api/v1/your-endpoint-slug/submit \
  -H "Content-Type: application/json" \
  -H "x-api-key: your-api-key" \
  -d '{"name": "Jane", "email": "jane@example.com"}'

Security best practices

Keep your key out of client-side code

Always store your API key in an environment variable and call Submito from your backend. If you call it directly from the browser, the key is visible to anyone who inspects the page.

Never commit your key to Git

Store it in environment variables (.env) and add .env to your .gitignore.

Rotate your key if compromised

Go to your dashboard → API Key section → Revoke and generate a new one.

Getting Started

Integration

Reference

Resources

API Key

Where to find your API key

Example

Security best practices

​API Key

​Where to find your API key

​Example

​Security best practices

API Key

Where to find your API key

Example

Security best practices