Authentication

All API requests must include your API key in the Authorization header.

Authentication Method

The Prediko API uses Bearer token authentication. Include your API key in every request:

Authorization: Bearer pk_live_YOUR_API_KEY

API Key Format

API keys follow a predictable format:

Format	Example
pk_live_*	pk_live_8x9kL2mP4nQ7rS1tU3vW5xY6

Creating API Keys

1. Log into your Prediko Dashboard
2. Navigate to Settings > API Keys
3. Click Create API Key
4. Name your key descriptively (e.g., “ERP Integration - Production”)
5. Copy and securely store the key

Caution

API keys are only displayed once. If you lose your key, you’ll need to create a new one.

Authentication Examples

cURL

curl -X GET "https://api.prediko.io/api/v1/orders" \
  -H "Authorization: Bearer pk_live_YOUR_API_KEY"

Python

import requests

headers = {
    "Authorization": "Bearer pk_live_YOUR_API_KEY"
}

response = requests.get(
    "https://api.prediko.io/api/v1/orders",
    headers=headers
)

JavaScript

const headers = {
  "Authorization": "Bearer pk_live_YOUR_API_KEY"
};

const response = await fetch(
  "https://api.prediko.io/api/v1/orders",
  { headers }
);

Security Best Practices

Do

• Store API keys in environment variables
• Rotate keys periodically
• Monitor API key usage in the dashboard

Don’t

• Commit API keys to version control
• Share keys via email or chat
• Use production keys in client-side code
• Embed keys in mobile apps

Error Responses

Status	Error	Description
401	Missing Authorization header	No API key provided
401	Invalid API key format	Key doesn’t match expected format
401	Invalid or expired API key	Key not found or has been revoked

Example error response:

{
  "detail": "Invalid or expired API key"
}