# TokenFlowLab API authentication

Create an API Key in the TokenFlowLab dashboard, then send it as a bearer token on every model request.

```http
Authorization: Bearer TOKENFLOW_API_KEY
```

Example:

```bash
curl https://api.tokenflowlab.com/v1/models \
  -H "Authorization: Bearer $TOKENFLOW_API_KEY"
```

Keys should be stored as secrets. Do not embed them in browser code, public repositories, or URLs. A missing or invalid key returns HTTP 401. Insufficient balance may return HTTP 402, and rate or concurrency limits may return HTTP 429.