> ## Documentation Index
> Fetch the complete documentation index at: https://docs.submito.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate your requests with an API key.

## API Key

Every request to the Submito submission endpoint must include your **API key** in the request header.

```http theme={null}
x-api-key: your-api-key
```

## Where to find your API key

1. Go to your [dashboard](https://submito.dev/dashboard/workspace)
2. Navigate to the **API Key** section
3. Click **Generate key** if you haven't already
4. Copy the key — it is shown in full only once

> [!WARNING]
>
> If you lose your API key, you can revoke it and generate a new one. Your existing quota count will be preserved.

## Example

```bash theme={null}
curl -X POST https://submito.dev/api/v1/your-endpoint-slug/submit \
  -H "Content-Type: application/json" \
  -H "x-api-key: your-api-key" \
  -d '{"name": "Jane", "email": "jane@example.com"}'
```

## Security best practices

> [accordion] Keep your key out of client-side code
>
> Always store your API key in an environment variable and call Submito from your backend. If you call it directly from the browser, the key is visible to anyone who inspects the page.

> [accordion] Never commit your key to Git
>
> Store it in environment variables (`.env`) and add `.env` to your `.gitignore`.

> [accordion] Rotate your key if compromised
>
> Go to your dashboard → API Key section → Revoke and generate a new one.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.