Authentication

The iQ Intel API uses Bearer API keys. Create keys from your API keys dashboard.

Key format

Keys are 40-character strings prefixed iqi_live_:

iqi_live_a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6

The key is shown ONCE at creation time. Store it in your secret manager — we only retain a hash.

Sending the key

Include the key in the Authorization header on every request:

Authorization: Bearer iqi_live_YOUR_KEY_HERE

Missing / invalid key

• Missing Authorization header → 401 Missing bearer token
• Unknown key → 401 Invalid API key
• Revoked key → 401 API key revoked
• Quota exhausted → 429 Monthly quota exhausted

Revoking a key

Revocation is instant. Hit the revoke button in your dashboard, and the next API request using that key returns 401 within one HTTP roundtrip.

Rotating keys

Create a new key, deploy it to your service, then revoke the old one. Keys don't expire automatically — rotation is your call.