Every v1 operation requires the 16-character API key associated with an active Videobase account.
Send the key in the X-Api-Key header. This is the recommended method.
Query authentication
The backend also accepts the key in a key query parameter:
Prefer header authentication. Query strings can appear in browser history, reverse-proxy logs, analytics tools, and copied URLs.
Invalid keys
A missing, malformed, revoked, or unknown key returns HTTP 500 with an error body:
See Error handling for the complete error contract.