Skip to main content
Arrays supports two authentication modes. Send your key in the X-API-Key header.

Get a key

  1. Sign up at arrays.org (email, Google, or GitHub)
  2. Copy the key from your Dashboard — visible immediately
  3. Store in env / secret manager — never commit to git

Security best practices

  • Never expose your API key in client-side code (browser, mobile, public Cursor rules).
  • Use a backend proxy if you need to call Arrays from a browser app.
  • Rotate keys regularly from the Dashboard.
  • Use separate keys for dev / staging / prod.

2. Nanopayment (no key, pay-per-call)

For crypto endpoints, you can skip the API key entirely and pay per call in USDC. Full Nanopayment guide →