x-api-key header.
Create an API key
Dashboard (recommended)
- Go to tryhuntr.com/dashboard.
- Sign up with your email.
- Copy your API key from the dashboard.
Email verification API
For programmatic signup flows: Step 1 — request verificationGET /verify?token=... and returns your API key once. The token expires after 10 minutes.
Each email can have only one active key.
Use your key
Authenticated endpoints return
401 when the key is missing or invalid.
Recover a lost key
POST /keys/reset with the token to receive a new key.
Rotate or revoke
Both require the current valid
x-api-key.
Public endpoints
These work without authentication:POST /keys/create— start signupGET /verify— complete signupGET /pricing— public pricing matrixGET /health— health check
Security practices
- Store keys in server-side secrets (env vars, vaults) — never in frontend code.
- Use separate keys per environment (staging vs production) when possible.
- Rotate immediately if a key is exposed.
Next step
- Quickstart — make your first research call
- Rate limits — 5 requests/second per key
- Credits and pricing — how billing works