API

API Authentication

Authenticate your API requests using API keys or JWT tokens.

API key authentication

The recommended method for server-to-server requests. Pass your key in the X-API-KEY header:

curl -H "X-API-KEY: sk_your_api_key" https://api.screenshotcenter.com/api/v1/screenshot/create ...

Alternatively, use the key query parameter (less secure, avoid for production):

https://api.screenshotcenter.com/api/v1/screenshot/create?key=sk_your_api_key

JWT authentication

Dashboard sessions use JWT tokens in the Authorization: Bearer <token> header. JWT tokens are short-lived and not intended for server-to-server use.

Keeping keys secure

Store keys in environment variables, never in source code.
Rotate keys regularly and after any potential exposure.
Use separate keys for different environments.