Authentication

Fender has two ways to call the API:

1. Anonymous — no credentials, rate limited to 30 requests/min per IP. Great for trying things out.
2. API key — created from your account, with much higher limits.

Create an account

Accounts are powered by Firebase Authentication (email/password or Google). The easiest way to sign up and create a key is the Playground — sign in there and click Create API key.

Under the hood:

• You sign in with Firebase and receive a short-lived ID token.
• The API verifies that token and issues a long-lived API key (fend_live_…).
• The key is shown once. Store it securely — we only keep a hash.

Use your API key

Send the key as a bearer token:

curl "https://api.fender.ai/v1/disposable?email=test@mailinator.com" \
  -H "Authorization: Bearer fend_live_xxxxxxxxxxxxxxxx"

…or with the X-API-Key header:

curl "https://api.fender.ai/v1/disposable?domain=mailinator.com" \
  -H "X-API-Key: fend_live_xxxxxxxxxxxxxxxx"

Manage keys via the API

These endpoints authenticate with a Firebase ID token (not an API key):

Method	Path	Description
GET	/v1/account/me	Your account profile.
GET	/v1/account/keys	List your keys (never secrets).
POST	/v1/account/keys	Create a key — returns the secret once.
DELETE	/v1/account/keys/:id	Revoke a key.

curl -X POST "https://api.fender.ai/v1/account/keys" \
  -H "Authorization: Bearer <FIREBASE_ID_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"name":"production"}'

Caution

Treat API keys like passwords. If a key leaks, revoke it immediately and create a new one. You can have up to 10 active keys.