Skip to main content

Authentication

All external API calls require this header:

Authorization: X-API-Key YOUR_API_KEY

Validation Flow​

For each request, Minotaur checks:

  1. The key exists and belongs to your account.
  2. The key is not revoked.
  3. The key is not expired.
  4. The key has the endpoint permission required.

If all checks pass, the request is processed.

Common Failures​

  • 401: Missing header or wrong auth scheme.
  • 403: Key revoked, expired, not found, or missing permission.