API Keys

import { Unkey } from "@unkey/api";

const unkey = new Unkey({ rootKey: process.env.UNKEY_ROOT_KEY! });

export async function handler(req: Request) {
  // 1. Extract the key from the Authorization header
  const key = req.headers.get("Authorization")?.replace("Bearer ", "");

  if (!key) {
    return new Response("Missing API key", { status: 401 });
  }

  try {
    // 2. Verify with Unkey
    const { meta, data } = await unkey.keys.verifyKey({ key });

    if (!data.valid) {
      // Key is invalid, expired, rate limited, or has no remaining uses
      return new Response("Unauthorized", { status: 401 });
    }
    // Continue with your API logic...
    return new Response("Hello!");
  } catch (err) {
    console.error(err);
    return new Response("Service unavailable", { status: 503 });
  }
}

from unkey import Unkey

unkey = Unkey(root_key="unkey_...")

def handler(request):
    key = request.headers.get("Authorization", "").replace("Bearer ", "")

    if not key:
        return Response("Missing API key", status=401)

    result = unkey.keys.verify_key(key=key)

    if not result.valid:
        return Response("Unauthorized", status=401)

    # Key is valid, continue with your API logic
    return Response("Hello!")

package main

import (
    "context"
    "net/http"
    "os"
    "strings"
    unkey "github.com/unkeyed/sdks/api/go/v2"
    "github.com/unkeyed/sdks/api/go/v2/components"
)

func handler(w http.ResponseWriter, r *http.Request) {
    auth := r.Header.Get("Authorization")
    key := strings.TrimPrefix(strings.TrimSpace(auth), "Bearer ")

    client := unkey.New(unkey.WithSecurity(os.Getenv("UNKEY_ROOT_KEY")))

    res, err := client.Keys.VerifyKey(context.Background(), components.V2KeysVerifyKeyRequestBody{
        Key: key,
    })

    if err != nil || !res.Valid {
        http.Error(w, "Unauthorized", http.StatusUnauthorized)
        return
    }

    w.Write([]byte("Hello!"))
}

curl -X POST https://api.unkey.com/v2/keys.verifyKey \
  -H "Authorization: Bearer $UNKEY_ROOT_KEY" \
  -H "Content-Type: application/json" \
  -d '{"key": "sk_1234..."}'