Authentication
Every API request must include your API key in theAuthorization header.
API Base URL
All requests must be sent to the secure Bodyguard proxy:https://api.leaf7.fun
Finding your API key
- Log in to your Leaf7 Dashboard
- Navigate to Settings
- Your API key is displayed under API Key
Automated Key Rotation: For security, your API key is automatically rotated every 7 days. You will receive an email warning 24 hours before rotation, and a confirmation email with your new key once rotated. Your old key remains valid for a 24-hour grace period after rotation.
Using your API key
Include your API key as a Bearer token in theAuthorization header of every request.
Error responses
If your API key is missing or invalid, you’ll receive:401 or 403.
Rate limits
Exceeding rate limits returns a
429 Too Many Requests response. Back off and retry after the window resets.