Glossary/API Key

API Key

A secret token used to authenticate programmatic requests to a platform's API. Like a password for your code — it proves your identity without a username/password login flow.

Extended Definition

API keys allow developers and automation tools to interact with a platform programmatically. Instead of logging in through a web interface, you include your API key in the request header, and the server authenticates you based on the key. This enables scripts, integrations, and third-party tools to create links, fetch analytics, and manage campaigns without manual intervention.

# API key in request header
curl -H "X-API-Key: grdr_live_abc123def456" \
     https://api.georedir.com/api/v1/public/links

Security Best Practices

Never commit to git — Store API keys in environment variables or secret managers, never in source code
Use separate keys per integration — If one key is compromised, you only need to revoke that one
Rotate regularly — Generate new keys periodically and revoke old ones
Use server-side only — Never expose API keys in client-side JavaScript or mobile apps
Monitor usage — Check the "last used" timestamp to detect unauthorized access

API Key vs OAuth vs JWT

Method	Best For	Complexity
API Key	Server-to-server, scripts	Low
OAuth 2.0	Third-party app access	High
JWT	User sessions, web apps	Medium

How GeoRedir Handles API Keys

GeoRedir provides API keys on Pro plans and above. Generate keys in your dashboard settings. Keys are hashed (never stored in plain text) and sent via the X-API-Key header. Create multiple keys for different integrations and revoke them individually. All public API endpoints are available at /api/v1/public/*. See the API Integration Guide for full documentation.

Automate with the GeoRedir API

Generate API keys, manage links programmatically, and integrate with your stack. Available on Pro plans.

Start Free API Integration Guide

Free plan included • No credit card required • Upgrade anytime