Authentication

​

API Key Authentication

​

Obtaining Your API Key

​

Passing the API Key

​

HTTP Header (Recommended)

curl -X POST https://promptinspector.io/api/v1/detect/sdk \
  -H "Content-Type: application/json" \
  -H "X-App-Key: your-api-key" \
  -d '{"input_text": "Hello world"}'

​

Authorization Bearer Token

curl -X POST https://promptinspector.io/api/v1/detect/sdk \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer your-api-key" \
  -d '{"input_text": "Hello world"}'

​

SDK Configuration

# Option 1: Pass directly
client = PromptInspector(api_key="your-api-key")

# Option 2: Environment variable
# export PMTINSP_API_KEY=your-api-key
client = PromptInspector()

// Option 1: Pass directly
const client = new PromptInspector({ apiKey: "your-api-key" });

// Option 2: Environment variable
// export PMTINSP_API_KEY=your-api-key
const client = new PromptInspector();

​

MCP Server

​

Environment Variable

PMTINSP_API_KEY=your-api-key

​

Security Best Practices

• Use environment variables — Store your API key in environment variables or a secrets manager, not in source code.
• Rotate keys regularly — You can regenerate your App API Key from the dashboard at any time. The old key will be immediately invalidated.
• Separate environments — Create separate Apps for development, staging, and production to isolate usage and avoid accidental quota consumption.
• Restrict access — Limit access to API keys within your organization to only those who need them.

​

Rate Limits & Quotas

• Rate limits — Maximum requests per minute, determined by your subscription plan
• Monthly quotas — Maximum total requests per billing cycle
• Text length limits — Maximum input text length per request