API v1StableLast updated Oct 2026Changelog →
Get started

Authentication

Bearer keys and accepted headers.

Send your key in either header — they are equivalent:

Authorization: Bearer messy_live_...
# or
X-Zapinner-Key: messy_live_...

The legacy X-Zapiit-Key header is still accepted for backwards compatibility. RapidAPI subscribers are authenticated automatically by the RapidAPI proxy and don't send a key.

A missing key returns 401 unauthorized; an unknown key 401 invalid_api_key; a revoked key 401 revoked_api_key.