Skip to main content

Authentication

All API requests require authentication using an API key.

Required Header​

X-Api-Key: your_api_key_here

Getting Your API Key​

  1. Log in to your WASMOU account
  2. Navigate to API Settings
  3. Generate or view your API key
  4. Configure allowed IP addresses (optional but recommended)

Example Request​

curl -X GET "https://gateway.wasmou.net/api/account" \
  -H "X-Api-Key: your_api_key_here"

Security Best Practices​

IP Whitelist​

Configure allowed IP addresses in your account settings. If configured, only requests from whitelisted IPs are accepted.

Note: The system automatically detects real IPs behind Cloudflare using the CF-Connecting-IP header.

Keep Your API Key Secret​

  • Never commit API keys to version control
  • Use environment variables to store API keys
  • Rotate API keys regularly
  • Use different API keys for development and production

Rate Limiting​

  • 60 requests per minute per API key
  • Returns 429 Too Many Requests when exceeded
  • Implement exponential backoff if you hit rate limits

Common Authentication Errors​

ErrorDescription
API key is requiredMissing X-Api-Key header
Invalid API keyAPI key invalid or expired
IP address not allowedRequest IP not in whitelist