Skip to main content
Don’t have an API key yet? Create one in the Graphy console — see API keys for the full walkthrough.

Base URL

Authorization Header

All requests require a Bearer token:

Required Headers

Example call


API Key Security

Never expose API keys in client-side code. Call the API from your backend.
Best practices:
  • Store keys in environment variables
  • Use a secrets manager in production
  • Rotate keys periodically
  • Use separate keys for development and production

Authentication Errors

Authentication errors are not retryable. Check that:
  • The Authorization header is present
  • The header format is Bearer YOUR_API_KEY (note the space)
  • The API key is valid and active