Authentication

Every request is authenticated with an API key in the X-API-Key header.

Every request is authenticated with an API key in the X-API-Key header.

curl https://api.vault.stashtab.gg/v1/account \
  -H "X-API-Key: sk_live_..."

Keys are managed in the partner console, are named, may carry an expiry, and can be deactivated at any time.

Key prefixes are environment-bound: sk_live_* keys work only on production and sk_test_* keys work only on sandbox — see Environments & sandbox for the partitioning rules.