Authentication

All requests to the FluxRail API require an API key. Pass it in the X-API-Key header on every request.

# Every request must include this header
curl https://api.fluxrail.io/api/v1/subscriptions \
  -H "X-API-Key: flux_your_key_here"

Key Format

Every key carries its mode in the prefix: flux_live_… for production and flux_test_… for sandbox. The mode is decided entirely by which key you send — see Test Mode.

Keys are hashed server-side — FluxRail cannot recover a lost key. If compromised, revoke it in your dashboard and generate a new one.

Quick Test

# Validate your key and see your plan info
curl https://api.fluxrail.io/api/v1/auth/validate-key/ \
  -H "X-API-Key: flux_your_key_here"

# 200 response:
{
  "valid": true,
  "user": "you@example.com",
  "plan": "pro",
  "rate_limit": 1000,
  "subscriptions_used": 12,
  "subscriptions_limit": 2000
}