Authentication

Every API request requires an API key passed via the X-API-Key header.

Setting the Key

cURL

curl -H "X-API-Key: your-api-key" \
  "https://beta.pushapi.xyz/api/discover?niche=gaming"

JavaScript / Node.js

const res = await fetch("https://beta.pushapi.xyz/api/discover?niche=gaming", {
  headers: { "X-API-Key": "your-api-key" },
});
const data = await res.json();

Python

import requests

res = requests.get(
    "https://beta.pushapi.xyz/api/discover?niche=gaming",
    headers={"X-API-Key": "your-api-key"},
)
data = res.json()

How It Works

1. You send the X-API-Key header with every request
2. We validate the key against our database
3. If valid, the request proceeds and your usage counter increments
4. If invalid, you get a 401 Unauthorized response

Invalid Key Response

{
  "error": "Invalid API key"
}

Common causes:

• Missing the X-API-Key header entirely
• Typo in the API key
• Using a key from a different account
• Key has been revoked

Response Headers

Every successful response includes rate limit headers:

Header	Description
X-RateLimit-Limit	Your daily request limit
X-RateLimit-Remaining	Requests remaining today
X-RateLimit-Tier	Your tier (free, starter, pro)

Per-Key Isolation

Each API key has its own isolated data:

• Tracked creators — only you see the creators you track
• Alerts — only you receive alerts for your tracked creators
• Usage — each key has its own rate limit counter

Keys cannot see each other's data. This means:

• Your competitor's API key won't see your tracked creators
• Your alerts are completely private
• Your usage is separate from other users

Getting an API Key

Contact pricing@pushapi.xyz to get your API key. Include:

• Your name/company
• Intended use case
• Expected volume (how many API calls per day)

We'll send you a key within 24 hours.