Authentication

Authenticate every request with your API key as a Bearer token:

Authorization: Bearer sk_live_•••

Live vs test keys

• sk_live_… — production keys. Conversions count against your plan and billing.
• sk_test_… — test keys for development.

Create and revoke keys in the dashboard. We store only a hash of each key, so the full value is shown once at creation — copy it then.

Keep keys secret

• Never embed a key in client-side code or commit it to source control.
• Use environment variables (e.g. CAFP_KEY).
• Rotate keys by creating a new one and revoking the old one. Revocation is immediate.

Errors

A missing or invalid key returns 401:

{
  "error": {
    "type": "authentication_error",
    "code": "authentication_error",
    "message": "Invalid or revoked API key.",
    "docs_url": "https://createafillablepdf.com/docs/errors"
  }
}