Authentication
API keys and the X-API-Key header.
Every /api/v1 request authenticates with an API key in the X-API-Key header.
curl -H "X-API-Key: flk_your_key" https://api.sandlproject.org/api/v1/newsKeys
- Create and revoke keys in your dashboard.
- The secret (prefixed
flk_) is shown once at creation; store it securely. We keep only a hash. - A missing, malformed, or revoked key returns
401 Invalid or missing API key.
Rate limits
Each key is limited to 60 requests per minute. Exceeding it returns 429 with a Retry-After
header. Back off and retry.
Access
Every member gets the same access: full point-in-time history and unlimited monthly
requests on both /api/v1/news and /api/v1/indexes. The only limit is the 60 requests per
minute rate cap above. See Access.