Get started

Authentication

Send your secret key as a Bearer token on every request. Keys are created in Profile → API keys on fittins.ai and are shown once. A key works only from a server: the API sends no CORS headers, so a web page can't use it.

Authorization: Bearer fit_live_9Xq2LmT4vB7nR1sK8pZ3wY6cD0eH5jUa

• An account can have up to 10 active keys. Give each one a name, such as the system that uses it.
• We store only a hash of each key and its last 4 characters. A lost key can't be shown again: create a new one and revoke the old one.
• Revoking a key stops it at once. Results already made stay in My Generations.
• If the account's plan drops below Pro, its keys answer 403 api_not_in_plan until it upgrades again.