Authentication

Authentication with API keys

All Company.info APIs are secured using API keys. An API key is a unique token issued to each customer, used to authenticate requests to the API Hub.

How it works

To authenticate a request, include your API key in the X-API-Key header of each HTTP request. The server will validate the key before processing the request.

X-API-Key: YOUR_API_KEY

If the API key is invalid or missing, the request will be rejected with an authentication error.

Access Model

The API currently uses X-API-Key only. This means that once a request is successfully authenticated, access to all available endpoints is permitted.

Note: It is your responsibility to use the API key securely, stay within your permitted usage, and comply with the Company.info API Terms of Use.

Rate limiting

To maintain the availability, performance, and reliability of our platform, API usage is subject to usage limits.

If requests are sent too quickly, the API may respond with a 429 Too Many Requests status. Integrations should handle this response by temporarily reducing the request rate and retrying after a short delay. We recommend using exponential backoff and avoiding immediate or unlimited retries.

Applicable limits may vary by API, agreement, or usage scenario. Contact Company.info if you expect high-volume or highly concurrent API usage.


How to obtain an API Key

As part of the onboarding process, a designated technical contact is identified. Once onboarding is complete, this contact will receive the API key by email.

If you haven’t received your API key or need additional keys for your team, you can request an API key via our web form


Using your API Key

To authenticate requests, include your API key in the request header using the X-API-Key header.

curl -X GET 'https://api.company.info/example' \
 -H 'accept: application/vnd.api+json' \
 -H 'X-API-KEY: xxx'

Replace YOUR_API_KEY with the actual key provided during onboarding.

Error handling

Error CodeErrorSolution
400Access to this API has been disallowedThe API key may not have the required access policies or may no longer be valid. Contact support..
401Authorization Field MissingEnsure the API key is included in the request header using the X-API-Key format.
403Key not authorizedPlease verify that the API key is provided in the X-API-KEY request header and that the key is authorized to access this API. If the issue persists, please contact our support team.

Did this page help you?