Authentication

All API requests (except /health) require an API key passed via the x-api-key header.

Getting your API key

Your key will be prefixed with ck_ and shown once — store it securely.

Include the key in every request:

curl -H "x-api-key: ck_live_abc123..." \
  https://api.companies.social/domain/stripe.com

Never expose your API key in client-side code. Always make API calls from your server.

Status	Meaning
`401`	Missing or invalid API key
`401`	No active subscription for this account
`429`	Rate limit exceeded — see Rate Limits

⌘I