Authentication

Key format

cam_live_xK7mP2nQ9rT4wZ8a    production key
cam_test_bN3fG6hJ1kL5oR9s    test key (no credit deduction)

• Prefix cam_ (Create a Meme)
• Environment live_ or test_
• 20 random alphanumeric characters

Sending the key

Every request requires the Authorization header:

Authorization: Bearer cam_live_xK7mP2nQ9rT4wZ8a

Test keys

Keys starting with cam_test_ skip credit deduction. Use them in CI, sandbox environments, and during development. They count against rate limits but never against your credit balance.

Storage

We store only a SHA-256 hash of your key plus the first 12 characters as a prefix for dashboard identification. The plaintext is shown once at creation time and cannot be recovered. Treat it like a password.

Revocation

Suspending a key in the dashboard immediately invalidates it. Subsequent requests return 401 INVALID_API_KEY or 403 SUSPENDED_API_KEY.