Authentication

All API requests require a Bearer token in the Authorization header.

Authorization: Bearer YOUR_API_KEY

Create an API key

You need an existing API key to create new ones. Your first key is provisioned when you sign up.

curl -X POST https://averra.dev/api/v1/extract/keys \
  -H "Authorization: Bearer YOUR_EXISTING_KEY"

Important: The full key is only returned once. Store it securely. After this response, only the prefix (sk_live_7951...) is visible.

List your keys

curl https://averra.dev/api/v1/extract/keys \
  -H "Authorization: Bearer YOUR_API_KEY"

Revoke a key

curl -X DELETE https://averra.dev/api/v1/extract/keys/KEY_ID \
  -H "Authorization: Bearer YOUR_API_KEY"

Note:You cannot revoke the key you're currently using to authenticate. Use a different key to revoke it.

Key format

Keys are 56 characters long. Only the SHA-256 hash is stored on our servers — we never store your plaintext key.

Security best practices

• Store keys in environment variables, never in source code
• Use separate keys for development and production
• Revoke keys immediately if compromised
• Each key has its own usage tracking