Core Concepts

API Authentication

Understand organization API key authentication for triggering application emails.

All requests to Histeria public email endpoints must include an organization API key passed via the x-api-key header.

Request Header

http
x-api-key: ck_live_your_secret_key

Security Best Practices

  • Store API keys securely in server-side environment variables (.env).
  • Never expose API keys in client-side code or public Git repositories.
  • Create separate API keys for Production and Staging environments.