Authentication

Authentication

All Deployment API requests must include a valid API key in theAuthorization header using the Bearer scheme.

API Key Format

Deployment API keys use the prefix mcy_live_ followed by 22 base58 characters. Example:

mcy_live_7xKj9mNpQ2rYvW4sT6uB8a

Making Authenticated Requests

curl https://your-deployment.macyou.co/api/v1/models \
  -H "Authorization: Bearer mcy_live_YOUR_KEY"

Key Management

Each deployment can have up to 10 API keys. Keys are managed from the deployment detail page in your dashboard.

• Keys are shown in full only at creation time — store them securely.
• Keys can be revoked instantly from the dashboard.
• Keys can have an optional expiration date.
• The last_used timestamp is updated on each request.

Security Best Practices

• Store keys in environment variables, never in source code.
• Rotate keys periodically and revoke unused ones.
• Use separate keys for development and production.
• Monitor the last_used timestamp for anomalies.