Authentication

Send your key as a bearer token on every request:

Authorization: Bearer ak_your_key_here

Keys

Create keys at inboxfound.com/app/keys. A key is shown once; only a hash is stored afterwards.
Each key is scoped to find, verify or both. A request outside the scope returns 403 key_scope_denied.
A key can submit and read jobs. It cannot touch billing, create other keys or read another account’s jobs.
Revoke a key from the dashboard and it stops working immediately. Jobs already admitted still finish and settle.
Changing your primary email revokes all keys.

Keys belong in your server environment. Never ship one in a browser bundle, a mobile app or a repository.

Limit	Default
Active keys per account	5
Key creations per hour	10
Job submissions per hour	60
Jobs in flight (funded account)	5

Rate-limit responses are 429 with a Retry-After header in seconds. Work already admitted is unaffected.