API Keys
All Geoff API requests require authentication via a Bearer token in the Authorization header.
Creating an API Key
- Log in to Geoff
- Navigate to Settings > API Keys
- Click Create API Key
- Copy and securely store your key — it will only be shown once
Using Your API Key
Include your API key in the Authorization header of every request:
Keep your API keys secure. Do not share them in public repositories, client-side code, or commit them to version control.
Security Best Practices
- Rotate your API keys regularly
- Use environment variables to store keys
- Set up separate keys for development and production
- Revoke unused keys from the Settings page