# Authentication

# Authentication

## API Key

This guide explains how to authenticate against the Hyblock API using an **API key**.

- **Auth Type:** API key header
- **Header:** `x-api-key`
- **Base URL:** `https://api.hyblockcapital.com/v2`

OAuth2 access tokens (`POST /oauth2/token`, `client_id` / `client_secret`, `Authorization: Bearer`) are **no longer used**. Send the API key on every request.

---

## 1) Prerequisites

You will need:

1. **API Key** (`x-api-key`)

> Issued to Professional API users with an active subscription (or trial). Keep it secret. Do not commit it to source control or expose it in client-side apps.

---

## 2) Request Spec

Include the API key on every protected endpoint.

**Headers**
```http
x-api-key: <your-api-key>