Authentication

Every request requires an API key in the X-API-Key header.

curl -H "X-API-Key: hb_live_xxxxx" \
  "https://api.hummingbirdapi.com/v1/geo/lookup"

Key Format

All API keys use the format: hb_live_<random>

Example: hb_live_k7Xp9mNqR2wYzA4bC8dE6fG1hJ3iL5oP

Key Management

In your dashboard:

• Create keys with custom names
• Revoke keys instantly
• Monitor usage per key

Security

WARNING

Never expose API keys in client-side code. Make requests from your server.

Best practices:

1. Store keys in environment variables
2. Rotate keys periodically
3. Create separate keys per service
4. Monitor for unusual activity

Errors

Code	Message	Fix
20001	Missing API key	Add X-API-Key header
20002	Invalid API key	Check key format
20003	API key revoked	Create new key

See Error Codes for details.