# Authentication

> Authenticate Edesy number masking API requests with a Bearer token. Create and rotate API keys on the portal.

Source: https://edesy.in/docs/number-masking/getting-started/authentication

All API requests are authenticated with a **Bearer token**. Every request must include an `Authorization` header with your API key:

```
Authorization: Bearer vp_your_api_key_here
```

API keys start with the prefix `vp_`. Treat your API key like a password — store it in an environment variable, and **never commit it to source control**.

## Creating and managing keys

Create, view, and rotate keys on the [API Keys page](https://masking.edesy.in/dashboard/api-keys) of the portal. The full key value is shown **only once**, at the moment you create it — copy it somewhere safe. Afterwards only the key prefix is visible.

If a key is compromised, revoke it from the portal and create a new one. Requests with a missing or invalid key return `401 unauthorized`.

## Example

```bash
curl https://voice-api.edesy.in/v1/masking/billing \
  -H "Authorization: Bearer vp_YOUR_API_KEY"
```

## Next

- [Quick Start](https://edesy.in/docs/number-masking/getting-started/quick-start)
- [Error Codes](https://edesy.in/docs/number-masking/api-reference/errors)