Overview
Steer AI uses API key-based authentication to secure access to our services. All API requests must include a valid API key in the request headers.Getting Your API Keys
1. Access Your Dashboard
- Log in to your Steer AI Dashboard
- Navigate to Settings → API Keys
- Click Generate New API Key
2. API Key Types
Development Keys
• For testing and development
• Limited rate limits
• Sandbox environment access
• Free tier available
Production Keys
• For live applications
• Full rate limits
• Production environment access
• Requires paid plan
Authentication Methods
HTTP Header Authentication
Include your API key in theAuthorization
header:
Query Parameter Authentication
Alternatively, include the API key as a query parameter:Security Note: Header authentication is recommended over query parameters to prevent API keys from appearing in server logs.
Environment Configuration
Development Environment
Production Environment
SDK Authentication
Python SDK
JavaScript SDK
Testing Your Authentication
Quick Test
Use this endpoint to verify your authentication is working:Security Best Practices
API Key Management
API Key Management
• Store API keys in environment variables, never in code
• Use different keys for development and production
• Rotate keys regularly (recommended: every 90 days)
• Immediately revoke compromised keys
Network Security
Network Security
• Always use HTTPS for API requests
• Implement proper SSL certificate validation
• Use IP whitelisting when possible
• Monitor API usage for unusual patterns
Access Control
Access Control
• Limit API key permissions to minimum required
• Use separate keys for different services
• Implement proper error handling
• Log authentication failures for monitoring
Rate Limiting
API keys have different rate limits based on your plan:Plan | Requests/Hour | Concurrent Requests |
---|---|---|
Free | 1,000 | 5 |
Starter | 10,000 | 20 |
Professional | 100,000 | 100 |
Enterprise | Unlimited | Custom |
Error Handling
Common Authentication Errors
Handling Authentication Errors
Troubleshooting
API Key Not Working
- Verify the key format: Should start with
dev_
orprod_
- Check environment: Ensure you’re using the correct base URL
- Confirm plan status: Verify your account is active
- Test with curl: Use the test endpoint above
Permission Denied
- Check key permissions: Ensure the key has required scopes
- Verify plan limits: Confirm you haven’t exceeded usage limits
- Review IP restrictions: Check if IP whitelisting is configured
Need help with authentication? Contact our support team at support@steerai.autos with your account ID (never share your API keys).