To ensure security and proper usage tracking, all requests to the Lokutor API must be authenticated using an API Key.
Managing API Keys
You can create, list, and revoke API keys directly from the Lokutor Dashboard.
Creating a Key
- Log in to your account.
- Navigate to Settings > API Keys.
- Click Create New Key.
- Copy the key immediately. For security reasons, we do not show the key again after creation.
Authentication Methods
We support standard Bearer Token authentication via the Authorization header.
Secure Handling of Keys
Treat your API Keys like passwords. If a key is leaked, it can result in unauthorized charges or usage on your account.
- Never commit your API keys to version control (GitHub, GitLab, etc.).
- Use Environment Variables (
.env files) to store keys on your server.
- Revoke Compromised Keys immediately through the dashboard if you suspect they have been exposed.
- Rotate Keys regularly to minimize the impact of long-term exposure.
Multiple Environments
We recommend creating separate API keys for your Development, Staging, and Production environments. This allows you to monitor usage independently and revoke keys without affecting all your systems.
Rate Limiting
The Lokutor API enforces rate limits to ensure service stability.
| Plan | Limit (Req/min) |
|---|
| Free / Trial | 10 |
| Developer | 100 |
| Business | 500 |
| Enterprise | Custom |
If you exceed these limits, the API will return a 429 Too Many Requests error.