Server-Side API Keys

Understanding authentication and secure API key usage.

Bearer Token Authentication

AXIMUR uses Bearer token authentication. Include your API key in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Server-Side Only

API keys must never be exposed in:

• Browser JavaScript or frontend code
• Mobile applications (iOS, Android)
• Public repositories or version control
• Client-side configuration files
• Browser developer tools or console logs

Secure Storage

Store API keys securely using:

• Environment variables (recommended for development)
• Secrets managers (AWS Secrets Manager, HashiCorp Vault, etc.)
• CI/CD secrets (GitHub Actions secrets, GitLab CI variables)
• Encrypted configuration files

API Key Delivery

After purchase, API keys are delivered via email to the address used during checkout. This is a manual delivery process within 24 hours of purchase.

Best Practices

• Rotate keys periodically — If you suspect exposure, contact support for key rotation
• Use different keys per environment — Development, staging, production should have separate keys
• Monitor usage — Check for unusual API usage patterns
• Never log keys — Ensure API keys are not included in application logs
• Revoke if compromised — Immediately contact support if a key is exposed

Example: Environment Variables

# .env file (never commit this)
AXIMUR_API_KEY=sk_live_abc123...

# In your application
import os
api_key = os.environ['AXIMUR_API_KEY']

Example: Secrets Manager

# Using AWS Secrets Manager (pseudo-code)
secret = get_secret('aximur-api-key')
api_key = secret['api_key']

What Happens If My Key Is Exposed?

If your API key is accidentally exposed in logs, code, or repositories:

1. Contact support immediately at contact@aximur.com
2. Request key revocation and replacement
3. Review API usage for unauthorized activity
4. Rotate any other keys that may have been exposed

Learn More

• Authentication — Full authentication reference
• Quickstart — Get started with the API
• Examples — Secure integration examples
• Limitations — Rate limits and operational boundaries