Base URL
All public API requests use:Bearer authentication
Send your Nylon API key in theAuthorization header of every request:
Create a key
Create and manage keys from the Nylon API page. Use a descriptive name so you can identify the application or environment using each key.Create separate keys for development, staging, and production. This lets you revoke one environment without interrupting the others.
Keep keys secure
- Send requests from your backend, not directly from browser code.
- Store keys in a secret manager or encrypted environment configuration.
- Never include keys in URLs, logs, source control, or client bundles.
- Revoke a key immediately if it may have been exposed.
Authentication errors
The API returns401 Unauthorized when the bearer token is missing, malformed, revoked, or invalid.