Authentication
All API endpoints (except/v1/health) require an API key passed in the X-API-Key header.
Getting a key
Sign up at gildea.ai to receive your API key. Keys are prefixed withgld_.
Using your key
Include the key in every request:Tiers
| Tier | Rate limit | Monthly limit | Features |
|---|---|---|---|
| Hacker (Free) | 5 req/min | 200/month | All read endpoints |
| Pro | 30 req/min | 2,000/month | All read endpoints + hybrid search |
| Team | 120 req/min | 10,000/month | All read endpoints + hybrid search |
Error responses
Missing or invalid API key returns401:
422 (FastAPI validation error for required header).
Security
- Keys are hashed with SHA-256 before storage — we never store plaintext keys
- Keys can be revoked instantly from your dashboard
- All requests are logged for usage tracking