Authentication

SimplyFill uses bearer-token authentication. Every API request requires an Authorization header with your API key.

Getting your API key

1. Sign in to simplyfill.app/dashboard
2. Navigate to Settings → API Keys
3. Click Generate new key
4. Copy the key immediately — it won’t be shown again

Your API key has full access to your account. Store it securely:

• Never commit keys to version control
• Use environment variables in production
• Rotate keys regularly using the dashboard

Making authenticated requests

Include your key in the Authorization header:

curl https://api.simplyfill.app/v1/templates \
  -H "Authorization: Bearer sk_test_..."

import { SimplyFill } from '@simplyfill/node'

const client = new SimplyFill({ 
  apiKey: process.env.SIMPLYFILL_API_KEY 
})

from simplyfill import SimplyFill

client = SimplyFill(
    api_key=os.getenv("SIMPLYFILL_API_KEY")
)

Key management

Your dashboard shows all active keys with:

• Creation date
• Last used timestamp
• Request count (last 24 hours)

To rotate a key:

1. Generate a new key
2. Update your application to use it
3. Delete the old key once confirmed working

Security best practices

• Use environment variables — Never hardcode keys in source
• Least privilege — One key per service/environment
• Monitor usage — Watch for unexpected spikes in the dashboard
• Rotate regularly — Every 90 days for production keys

Error responses

Invalid or missing keys return a 401 Unauthorized:

{
  "error": "invalid_api_key",
  "message": "API key is invalid or expired"
}

Next steps