Security & Auth

API Authentication

Authenticate all requests to the ClearTrack API using your private API secret key.

Authentication Headers

Pass your active API key in every request using the X-API-Key HTTP request header:

          Header
          Syntax
        

X-API-Key: ct_live_a1b2c3d4e5f6...

Key Format: Production API keys use the prefix ct_live_ followed by 32 cryptographically random alphanumeric characters.

          cURL
          GET /v1/usage
        

curl -H "X-API-Key: ct_live_your_key_here" \
  "https://api.cleartrackpromise.in/v1/usage"

Server-side only: Never expose your API key in browser client-side code, single-page applications, or mobile apps. Always proxy requests through your backend.
Environment variables: Store keys in environment variables (e.g. CLEARTRACK_API_KEY) or your cloud secret manager, never hardcoded in git.
Key revocation: If an API key is accidentally committed or compromised, contact support@cleartrackai.in immediately to revoke and re-issue credentials.