Documentation

Create and protect an API key

Use Bearer authentication and keep your MandAPI key out of public code.

Create a key in the dashboard

Open API keys, create a key, and save it in a secure location. You can revoke an exposed key in the dashboard. API keys.

Send the key as a Bearer token

Pass your key in the Authorization header for API requests. You can check the available models with this command:

curl https://api.mandapi.com/v1/models \
  -H "Authorization: Bearer $MANDAPI_API_KEY"

Keep the key private

Use an environment variable or a secret manager on your server. Do not embed the key in a browser app, mobile app, public repository, issue, or screenshot. Revoke it if you suspect exposure.

Set an environment variable

In a Unix shell, set the variable before running the example. Use your actual key locally; never paste it into public documentation.

export MANDAPI_API_KEY="YOUR_KEY_HERE"

Then continue with the first call. Quick start.