All API requests require a Bearer token in the Authorization header. API keys are managed in Agency Settings (Enterprise tier).
API endpoints are rate limited to 100 requests per minute per agency. When exceeded, you'll receive a 429 response with a retry_after field.