---
updatedAt: 2026-04-01T10:22:02.000Z
agentTools:
  projectIndex: https://developers.leadboxer.com/llms.txt
---

# Authentication & API Keys

The LeadBoxer API uses API key authentication to secure access to endpoints. All API requests must include a valid API key to authenticate.

## Authentication Method

API key authentication is implemented using the `x-api-key` header. This method provides a simple and secure way to authenticate your requests.

### Header Format

Include your API key in the request header as follows:

```
x-api-key: YOUR_API_KEY
```

## Getting Your API Key

1. Log in to your <Anchor label="LeadBoxer account" target="_blank" href="https://app.leadboxer.com">LeadBoxer account</Anchor>
2. Navigate to the Integrations settings and Data section
3. Generate or copy your API key
4. Store your API key securely - treat it like a password

## Making Authenticated Requests

### Example Request (cURL)

```bash
curl -X GET "https://api.leadboxer.com/api/endpoint" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json"
```

### Keep Your API Key Safe

* **Never expose your API key** in client-side code, public repositories, or version control
* Store API keys in environment variables or secure configuration files
* Use different API keys for development, staging, and production environments

## Error Responses

### 401 Unauthorized

Returned when the API key is missing, invalid, or expired.

```json
{
  "error": "Unauthorized",
  "message": "Invalid or missing API key"
}
```

**Solution**: Verify that your API key is correct and included in the `x-api-key` header.

## API Key Management

### Viewing Your API Keys

Navigate to your account settings to view active API key

## Support

If you encounter authentication issues or need assistance:

* Check the API status page
* Review the troubleshooting guide
* Contact support at <support@leadboxer.com>
* Visit our community forums for peer assistance