Authentication

Bearer token authentication

All API requests require a Bearer token in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Create API keys from your Account Settings page in the RawUGC dashboard.

API key secrets are only shown once when created. Store them securely — you cannot retrieve the secret later.

The API supports two authentication methods:

Method	Header	Rate Limit	Use Case
API Key	`Authorization: Bearer <key>`	10 req/min	Programmatic access, integrations
Session	Browser cookies	20 req/min	Dashboard, in-app usage

Most API consumers should use API key authentication.

Invalid or missing authentication returns a 401 error:

{
  "type": "https://api.rawugc.com/errors/authentication_error",
  "title": "Authentication Error",
  "status": 401,
  "detail": "Invalid API key"
}

See Error Handling for all error types.