---
title: "Authentication"
description: "Every NexLev API request must include your API key. There is no separate OAuth flow — a single key authenticates all endpoints documented in the NexLev API reference."
source: "https://dashboard.nexlev.io/docs/api/authentication"
---

# Authentication

Every NexLev API request must include your API key. There is no separate OAuth flow — a single key authenticates all endpoints documented in the [NexLev API reference](/docs/api/quickstart).

## Getting an API Key

1. Sign in to your [NexLev dashboard](https://dashboard.nexlev.io)
2. Go to [Create API Key](https://dashboard.nexlev.io/nexlev-api/create-api-key)
3. Copy the generated key — it is shown once and cannot be recovered later, only regenerated

> **Warning**
>
> **Keep it secret.** Your API key grants full access to your account's quota.
> Never commit it to source control or expose it in client-side code.

## Request Header

Include your API key in the `Authorization` header of every request:

```http
Authorization: Bearer YOUR_API_KEY
```

**Example with curl:**

```bash
curl "https://prod.dashboard.nexlev.io/api/external/channels/about?id=UCX6OQ3DkcsbYNE6H8uQQuVA" \
  -H "Authorization: Bearer YOUR_API_KEY"
```

## Managing Your Key

- **Rotate or revoke**: [Manage API Key](https://dashboard.nexlev.io/nexlev-api/manage-api-key)
- **Monitor usage**: The same page shows your remaining quota — see [Rate Limits & Quota](/docs/api/rate-limits) for how quota is calculated.

## Unauthenticated Requests

Requests without a valid `Authorization` header receive a `401 Unauthorized` response:

```json
{
  "error": "Unauthorized",
  "details": "Missing or invalid API key."
}
```