Authentication

How to authenticate with the API

The Moderation API uses API keys to authenticate requests. There are two kinds of keys:

Key	Prefix	Use it to	Where to manage it
Project key	sk_	Moderate content and work with a project’s authors, actions, review queues, and webhooks.	Project → Configure → API keys
Organization key	sk_org_	Create and manage projects and channels with the management API (Enterprise).	Settings → API keys

Each project has its own project keys. An organization key can’t moderate content, and a project key can’t call the management API. Both kinds can call Get account details. You manage keys in the dashboard.

Your API keys carry many privileges, so be sure to keep them secure. Don’t share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth.

Authentication to the API is performed with the Authorization header when making a HTTP request. Provide your API key prefixed with Bearer as the value of the Authorization header.

curl https://api.moderationapi.com/v1/account \
  -H "Authorization: Bearer $MODERATION_API_KEY"

You must make all API calls over HTTPS. Calls that you make over plain HTTP will fail. API requests without authentication will also fail.

We recommend creating two projects in your dashboard, one for development and one for production. This way you can create tokens for both environments.