Required endpoints
X-API-Key is required for:
GET /v1/locations/resolveGET /v1/locations/{geo_id}GET /v1/signals/geo/location/{geo_id}GET /v1/permits/searchGET /v1/signals/geo/searchGET /v1/signals/catalog
GET /v1/health/live does not require an API key.
Production key handling checklist
- keep keys server-side only
- use environment variables or a secrets manager
- do not commit keys to source control
- rotate keys on schedule and on suspected leakage
- issue separate keys per environment/service when possible
Auth responses
403missing/invalid key429throttled/quota exceeded

