API Authentication
The Euron Systems API uses API keys for authentication. All API requests must include a valid API key in the request headers.
Getting Your API Key
- Go to Settings → API → API Keys.
- Click Generate New Key.
- Give the key a descriptive name (e.g., "Website Integration" or "Mobile App").
- Set permissions for the key (read-only, read-write, or specific endpoints).
- Copy and securely store the key.
Important: API keys are shown only once at creation. If you lose a key, you must generate a new one.
Authentication Methods
API Key (Header)
Include your API key in the Authorization header:
curl https://api.euronsystems.com/v1/courses \
-H "Authorization: Bearer YOUR_API_KEY"
API Key (Query Parameter)
Alternatively, pass the key as a query parameter (not recommended for production):
curl "https://api.euronsystems.com/v1/courses?api_key=YOUR_API_KEY"
Rate Limiting
API requests are rate-limited to prevent abuse:
| Plan | Rate Limit |
|---|---|
| Pro | 100 requests/minute |
| Business | 500 requests/minute |
| Enterprise | 2,000 requests/minute |
Rate limit headers are included in every response:
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 95
X-RateLimit-Reset: 1703980800
When the rate limit is exceeded, the API returns a 429 Too Many Requests response.
Error Responses
| Status Code | Description |
|---|---|
| 401 | Invalid or missing API key |
| 403 | Key does not have permission for this endpoint |
| 429 | Rate limit exceeded |
| 500 | Internal server error |
Error responses include a JSON body:
{
"error": {
"code": "UNAUTHORIZED",
"message": "Invalid API key provided",
"status": 401
}
}
Security Best Practices
- Never expose API keys in client-side code (JavaScript in the browser).
- Use environment variables to store keys in server-side applications.
- Rotate keys regularly — generate new keys and deprecate old ones.
- Use least-privilege — assign only the permissions each key needs.
- Monitor usage — review API logs for suspicious activity.
Related Documentation
- Courses API — Course endpoints
- Students API — Student endpoints
- Webhooks — Event notifications