> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dubformer.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Learn how to authenticate with the Dubformer API

The Dubformer API uses API keys to authenticate requests. You can view and manage your API keys in the [Dubformer Studio](https://studio.dubformer.ai/profile).

All API requests must include your API key in the `Authorization` header:

```bash theme={null}
Authorization: Bearer YOUR_API_KEY
```

<Note>
  Keep your API keys secure and do not share them in publicly accessible areas such as GitHub, client-side code, or public forums.
</Note>

## Example Request

Here's an example request to list your projects:

```bash theme={null}
curl -X GET \
  https://studio.dubformer.ai/api/v1/projects \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -H 'Content-Type: application/json'
```

## Rate Limiting

The Dubformer API implements rate limiting to ensure fair usage and system stability. Current limits are:

* 60 requests per minute per API key
* 1000 requests per day per API key

If you exceed these limits, you'll receive a `429 Too Many Requests` response. The response will include `Retry-After` header indicating how many seconds to wait before making another request.

## Error Responses

When authentication fails, you'll receive one of the following error responses:

* **400 Bad Request**: Missing or invalid authorization token
* **400 Bad Request**: Access denied to this project

Example error response:

```json theme={null}
{
  "error": "Missing or invalid authorization token"
}
```