Vendor API authentication

The Vendor API OpenAPI contract uses an Authorization header with a Bearer token.

Send the authorization header

http
Authorization: Bearer YOUR_VINE_API_KEY
bash
curl https://api.vineeid.com/v1/auth/validate-api-key \
  -H "Authorization: Bearer $VINE_API_KEY"

Keep credentials server-side

  • Load the key from a server environment variable or secret manager.
  • Never ship a Vendor API key in a browser bundle, mobile app, or public repository.
  • Treat 401 Unauthorized as a credential or authorization failure and rotate compromised keys through your operational process.

The UAP SDKs use a different API host and x-api-key header. See the UAP overview before mixing the two integrations.