API Key
After partner approval, Gauntlet provisions an API key for your organization.Make Authenticated Requests
Pass the API key as aBearer token in the Authorization header:
Rate Limits
API access is rate-limited per partner: 60 requests/minute and 10,000 requests/day.
On
429, back off until X-RateLimit-Reset. Cache vault metrics and meta responses to reduce request volume.
Error Codes
Security
- Store keys in environment variables, add
.envto.gitignore - Use separate keys for development, staging, and production
- Rotate production keys every 90 days