Authentication

All API requests require authentication using an API key.

API Keys

API keys are managed in the dashboard under API Keys. Each key is scoped to your organization.

Key Format

API keys use the prefix rp_ followed by a random string:

rp_1a2b3c4d5e6f7g8h9i0j

Using API Keys

Include the API key in the Authorization header:

curl https://api.resendplus.com/v1/emails \
  -H "Authorization: Bearer rp_your_api_key"

SDK Usage

Pass the API key when initializing the SDK:

import { ResendPlus } from '@resend-plus/sdk'

const client = new ResendPlus({
  apiKey: process.env.RESEND_PLUS_API_KEY
})

Security Best Practices

1. Never expose API keys in client-side code - Only use keys on the server
2. Use environment variables - Don't hardcode keys in source code
3. Rotate keys regularly - Delete old keys when no longer needed
4. Use separate keys - Create different keys for development and production

Rate Limits

API requests are rate limited per API key. If you exceed the limit, you'll receive a 429 response.