Authentication

Send your key as a bearer token on every request. A key belongs to one account and can carry its own monthly budget cap, so you can hand a capped key to a side project without putting the rest of your balance at risk. The secret is shown once at creation and stored only as a hash, so a lost key is replaced rather than recovered.