API key

Louis Roy

An API key is an alphanumeric string that enables API developers to restrict and control access to their API. By identifying authorised use of APIs, it becomes possible to maintain, manage and monetise them more effectively.

A specific API key is always associated with a specific API client (the requester), whose various software modules or applications wish to communicate with the developer’s API.

Technically speaking, API keys enable the API server to identify the origin of each API call. The server can then carry out further validation to authorise access to API data and services. In summary, here is what happens when an application sends API requests:

  1. Using the unique API key, the API server validates the authenticity of the requester.
  2. If the API key matches one of the authorised keys, the server responds to the request and returns the expected response.
  3. If not, the server sends a rejection message to indicate that it is refusing the API call.