PynathPynath
</>Developers

API Key Authentication & Security

The Pynath Booking API uses API keys to authenticate requests. You can view and manage your secret API keys in your dashboard under Settings Developer Keys.

Supported Authorization Headers

You can authenticate your HTTP requests using either standard Authorization: Bearer <key> or the custom x-api-key: <key> header.

// Option A: Standard Bearer Token (Recommended)
Authorization: Bearer pyn_live_98a72b3c4d5e1f0a

// Option B: Custom Header
x-api-key: pyn_live_98a72b3c4d5e1f0a

Security Best Practices

  • Never expose secret API keys in client-side code: Keep keys in server-side environment variables (`PYNATH_API_KEY`).
  • Rotate keys periodically: Revoke old keys immediately if compromised in public repositories.
  • Rate Limits: Free plans permit up to 60 requests/minute. Pro plans allow up to 600 requests/minute. Exceeding limits returns HTTP `429 Too Many Requests`.