> ## Documentation Index
> Fetch the complete documentation index at: https://docs.squid-id.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate Squid ID API requests with a read-only API key scoped to one website. Create, disable, or revoke keys from your account settings.

## API key

Every API request requires your Squid ID API key in the `Authorization` header. Keys start with `sqid_`.

```
Authorization: Bearer sqid_YOUR_KEY
```

Squid ID keys are read-only and scoped to one website. They can read that website's identified visitor details, and nothing else. See [API keys](/account/api-tokens) for how to disable or revoke a key.

## Getting a key

<Steps>
  <Step title="Open the API keys settings">
    In your Squid ID dashboard, go to **Settings → API keys**. Switch to the website you want the key for using the header switcher.
  </Step>

  <Step title="Create a key">
    Click **New key**, name it, and copy it. The key is shown only once, so store it somewhere safe.
  </Step>
</Steps>

## Example request

```bash theme={null}
curl https://id-api.asksquid.ai/api/visitors/{visitorId}/details \
  -H "Authorization: Bearer sqid_YOUR_KEY"
```

```json theme={null}
{
  "name": "Sarah Chen",
  "email": "sarah@plaid.com",
  "company": "Plaid",
  "company_role": "VP Engineering",
  "linkedin_url": "linkedin.com/in/sarahchen"
}
```

<Warning>Treat API keys like passwords. Do not commit them to source control or expose them in client-side code. If a key leaks, revoke it in **Settings → API keys** and create a new one.</Warning>