Authentication
Every request carries your key in one header. There are no sessions and no OAuth.
- Send the key in the x-api-key header on every request.
- Never put the key in the address or in code that runs in your visitors' browsers.
- Keep it on your server and call the API from there.
- A missing, invalid or inactive key answers 403. A source your key does not include answers 401.
curl "https://motorapis.com/api/cars?domain_id=3&per_page=1" \
-H "x-api-key: YOUR_API_KEY"