How do I authenticate API requests?

Authentication

Hosted (Studio) — authenticate with an API key or a session token. \\\bash curl https://studio.underpeaks.com/api-public/v1/{project}/builder/{model} \\ -H "X-API-Key: your-api-key" \\\ Or with a Bearer session token: \\\bash curl https://studio.underpeaks.com/api-public/v1/{project}/builder/{model} \\ -H "Authorization: Bearer your-session-token" \\\ If both are present, the API key takes priority. A key must belong to the project you''re calling — a key from a different project returns 403. Self-Hosted (Core) — every request requires the X-API-Key header. Core does not support session-token auth for the public API. \\\bash curl https://your-instance.com/api-public/v1/{project}/{table} \\ -H "X-API-Key: your-api-key" \\\ Generate a key from your project''s Settings → API Keys.