Authentication

Send the API key in the Authorization header on every request. Missing, revoked, expired, or malformed credentials return 401.

Authorization: Bearer ndh_live_••••••••

Create separate keys for local development, CI, staging, and production. Each key is bound to one environment and only its selected scopes are accepted. Scopes can also be bound to specific dataset, job, or product resource IDs. Route handlers read operation scopes and resource parameters from the product manifest, so the same authorization seam can be reused by every product.

Create a replacement, deploy it, verify successful traffic, and only then revoke the old key. The dashboard reports calls, errors, rate limits, quotas, last use, IP restrictions, anomalies, quarantine state, and expiration for every key.