Authentication

All API requests require a Bearer token in the Authorization header.

Authorization: Bearer YOUR_API_KEY

Create an API key

You need an existing API key to create new ones. Your first key is provisioned when you sign up.

curl -X POST https://averra.dev/api/v1/extract/keys \
  -H "Authorization: Bearer YOUR_EXISTING_KEY"

Response (201)

{
  "key": "sk_live_79519fab64062639cc3dd53e09d02b7f3aafb2541230100e",
  "id": "678a6ec9-2afa-426d-a07a-12ba5103a8ca",
  "prefix": "sk_live_7951",
  "plan": "free",
  "monthly_limit": 50,
  "created_at": "2026-03-30T18:12:59.794Z",
  "warning": "Store this key securely. It will not be shown again."
}

Important: The full key is only returned once. Store it securely. After this response, only the prefix (sk_live_7951...) is visible.

List your keys

curl https://averra.dev/api/v1/extract/keys \
  -H "Authorization: Bearer YOUR_API_KEY"

Response

{
  "keys": [
    {
      "id": "678a6ec9-2afa-426d-a07a-12ba5103a8ca",
      "key_prefix": "sk_live_7951",
      "plan": "free",
      "monthly_limit": 50,
      "is_active": true,
      "created_at": "2026-03-30T18:12:59.794Z",
      "revoked_at": null
    }
  ]
}

Revoke a key

curl -X DELETE https://averra.dev/api/v1/extract/keys/KEY_ID \
  -H "Authorization: Bearer YOUR_API_KEY"

Response

{
  "message": "API key revoked",
  "id": "678a6ec9-2afa-426d-a07a-12ba5103a8ca",
  "prefix": "sk_live_7951",
  "revoked_at": "2026-03-30T18:13:10.674Z"
}

Note:You cannot revoke the key you're currently using to authenticate. Use a different key to revoke it.

Key format

All keys use the sk_live_ prefix and are 56 characters long. Only the SHA-256 hash is stored on our servers — we never store your plaintext key.

Security best practices

• Store keys in environment variables, never in source code
• Revoke keys immediately if compromised
• Each key has its own usage tracking