> ## Documentation Index
> Fetch the complete documentation index at: https://docs.inboxfound.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Server-side bearer keys, scoped and revocable.

Send your key as a bearer token on every request:

```http theme={null}
Authorization: Bearer ak_your_key_here
```

## Keys

* Create keys at [inboxfound.com/app/keys](https://inboxfound.com/app/keys). A key is shown once; only a hash is stored afterwards.
* Each key is scoped to `find`, `verify` or both. A request outside the scope returns `403 key_scope_denied`.
* A key can submit and read jobs. It cannot touch billing, create other keys or read another account's jobs.
* Revoke a key from the dashboard and it stops working immediately. Jobs already admitted still finish and settle.
* Changing your primary email revokes all keys.

> [!WARNING]
>
> Keys belong in your server environment. Never ship one in a browser bundle, a mobile app or a repository.

## Limits

| Limit | Default |
| - | - |
| Active keys per account | 5 |
| Key creations per hour | 10 |
| Job submissions per hour | 60 |
| Jobs in flight (funded account) | 5 |

Rate-limit responses are `429` with a `Retry-After` header in seconds. Work already admitted is unaffected.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.