API Key and Auth Enterprise
Your API key is in Installation → API (Enterprise plans). Keep it on your server: anyone with the key can send questions on your account.
Send the key in the x-api-key header, with your clientId in the body:
curl -X POST https://askvio.web.app/api/search \
-H "Content-Type: application/json" \
-H "x-api-key: YOUR_API_KEY" \
-d '{"clientId":"YOUR_CLIENT_ID","query":"What is your return policy?"}'
The key can also be passed as an apiKey query parameter, but the header is safer because URLs end up in logs.
Requests with a valid key skip the widget's origin and initialization-token checks. Questions sent through the API count towards the same monthly limit as the widget.