Authentication

The DeepSearch API uses scoped bearer keys for server-to-server authentication.

Bearer API keys

Create a key in the developer portal. Pass it in the Authorization header, store it in server secrets, and never expose it in a browser bundle. A key is shown in full only once.

1
2
3
4curl https://deepsearch.app/api/v1/search \
  -H "Authorization: Bearer $DEEPSEARCH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "query": "Ada Lovelace" }'

Scopes

Each key carries scopes that gate which endpoints it can call. New keys are granted all three by default, but production keys can be narrowed to only the endpoints they need and can be given an expiry date or per-key minute limit.