Authentication

All API requests are authenticated using an API key passed as a Bearer token in the Authorization header.

Getting your API key

Include the Authorization: Bearer header in every request:

curl -X GET "https://api.edge.bh/api/v1/services/iban/validate/DE89370400440532013000" \
  -H "Authorization: Bearer sk_live_your_key_here"

API keys follow the format sk_live_ followed by a random string. Example: sk_live_abc123def456...

Keys are hashed with SHA-256 before storage. Edge never stores your raw key.
Keys are shown once on creation. If you lose it, revoke it and create a new one.
Set an expiration date when creating keys for additional security.
Revoke keys immediately if compromised — go to API Keys and click Revoke.

Action	How
Create a key	Dashboard → API Keys → Create API Key
Revoke a key	Dashboard → API Keys → click Revoke on the key
Set expiration	Set “Expires at” when creating the key
View usage	Dashboard → Request Logs (filter by key)

Status	Meaning
`401 Unauthorized`	Missing, invalid, revoked, or expired API key
`402 Payment Required`	Insufficient credits
`429 Too Many Requests`	Rate limit exceeded