All requests require a **live API key**.

Send it as a Bearer token in the `Authorization` header:

```bash title="Header"
-H "Authorization: Bearer br_live_..."
```

API keys are tied to a workspace and inherit its plan limits.

## Validate a Key [#validate-a-key]

Use this before debugging endpoint paths or project IDs:

```bash title="Terminal"
curl https://blitzreels.com/api/v1/auth/validate \
  -H "Authorization: Bearer $BLITZREELS_API_KEY"
```

The response includes the workspace, user, environment, plan, key prefix, and current agent-skill guidance.

## Where to Create Keys [#where-to-create-keys]

Go to:

**Dashboard → Workspace → AI → API Keys**

Only owners/admins can create keys. Keys are shown once.

If a key is missing or invalid, the API returns `authentication_error`.