/v1/health) require an API key passed in the X-API-Key header.
Getting a key
Sign up at gildea.ai to receive your API key. Keys are prefixed withgld_.
Using your key
Include the key in every request:Tiers
| Tier | Rate limit | Monthly limit | Features |
|---|---|---|---|
| Free | 5 req/min | 200/month | All read endpoints |
| Pro | 30 req/min | 2,000/month | All read endpoints + hybrid search |
| Team | 120 req/min | 10,000/month | All read endpoints + hybrid search |
Error responses
An invalid, revoked, or expired API key returns401:
X-API-Key header is omitted entirely, FastAPI returns 422 (missing required header). If the header is present but the key is invalid, the API returns 401.
Security
- Keys are hashed with SHA-256 before storage — we never store plaintext keys
- Keys can be revoked instantly from your dashboard
- All requests are logged for usage tracking