Log in Get Started
Browse the API

Endpoint

Authentication

Send the key in the x-api-key header. Query-string keys are rejected so they never land in access logs.

ANY /api/v1/* except the public routes below

Header

x-api-key: astro_live_your_secret
  • Create and rotate keys in the Codex console at /api-keys.
  • Public, no key: GET /api/v1/ (manifest), GET /api/v1/geocoding/search, GET /api/v1/geocoding/reverse.
  • Browsers cannot attach this header to <img src>. SVG routes are POST/GET behind API auth — fetch them from your server.