Authentication

Authenticate every request with an API key from the Marso Studio dashboard. Send the key as a bearer token in the Authorization header:

Authorization: Bearer mxr_live_<your-key>

Each API key belongs to one account. Every asset, batch, and credit balance you read or write belongs to your account. Other accounts cannot see your data.

Keep your key secret. Do not commit it to a repository. Do not use it in client-side code.