Authentication

All API requests must include a valid API key.

Creating an API Key

1. Go to Settings > API Keys in your dashboard
2. Click Generate New Key
3. Copy the key immediately — it’s only shown once
4. Store it securely (environment variable, secrets manager)

Using Your Key

Include the key in the Authorization header of every request:

curl https://rentalot.ai/api/v1/properties \
  -H "Authorization: Bearer ra_live_abc123..."

Key Prefixes

• ra_live_ — production keys
• ra_test_ — test keys (if applicable)

Revoking Keys

Revoke any key from Settings > API Keys. Revocation is immediate — any requests using that key will return 401 Unauthorized.

API Access by Plan

Your API key inherits the rate limits and permissions of your plan:

Write operations have additional per-resource daily and monthly limits. Upgrade your plan to increase limits.

Security

• Never commit API keys to version control
• Use environment variables to store keys
• Rotate keys periodically
• Each key is scoped to your account — it can only access your properties and data