Authentication | HollrAI

Every request to the HollrAI API must include your API key in the hollr-api-key header.

$ curl https://api.hollr.ai/v1/conversation/conversations \
>   -H "hollr-api-key: YOUR_API_KEY"

Keep your API key on your server. Do not expose it in browser-side JavaScript, mobile apps, public repositories, or other client-side code.

Getting an API key

API keys are managed from the HollrAI platform at app.hollr.ai.

Open the API Keys section and create a key for the integration you are building.

Store the key in an environment variable or secrets manager.

$ export HOLLR_API_KEY="your-key-here"

$ curl https://api.hollr.ai/v1/conversation/conversations \
>   -H "hollr-api-key: $HOLLR_API_KEY"

Status	Meaning
`401`	The API key is missing or not recognized.
`403`	The API key is valid but is not authorized for the resource.

The standard error response looks like:

1 {
2   "status": "error",
3   "error_code": "401",
4   "message": "Unauthorized"
5 }

If you suspect a key has been exposed, rotate or revoke it from the HollrAI platform and replace it in your application.