X-API-Key header.
Key format
Keys look likewsg_live_<32 base62 chars>. The wsg_live_ prefix marks them as production keys. The full secret is shown once at generation time — after that, we don’t have it either.
Lost a key? Generate a new one and revoke the old. There’s no recovery flow.
Generating a key
Open the dashboard
Go to API Keys.
Revoking a key
Click Revoke on the row in the dashboard. It takes effect immediately — the next request with that key gets a401 Unauthorized.
Rotation
There’s no automated rotation yet. To rotate by hand:- Generate a new key.
- Deploy it to your application.
- Confirm requests succeed under the new key (the Usage page is the easy check).
- Revoke the old key.
Errors
| Status | Meaning |
|---|---|
401 Unauthorized | Missing or revoked key |
402 Payment Required | Out of credits. See Credits |