API Key Authentication
Most file operations use API key authentication via thex-api-key header.
Getting Your API Key
- Sign up at console.openfiles.ai
- Navigate to API Keys in your console
- Create API Key - Copy your key (starts with
oa_)
Using Your API Key
Security Best Practices
✅ Good Practices:- Store API keys in environment variables
- Use different keys for development and production
- Regenerate keys if compromised
- Implement rate limiting in your applications
- Hardcoding keys in source code
- Sharing keys in public channels
- Using production keys in development
Rate Limits
Rate limit headers are included in every response:
X-RateLimit-Limit- Your rate limit ceilingX-RateLimit-Remaining- Requests remaining in current windowX-RateLimit-Reset- UTC time when the rate limit resets