Authentication

All API endpoints require an API key. Pass it in the X-API-Key header with every request.

Getting a key

Sign up at platform.trythinkbase.com to create your API key instantly. Keys start on the free tier and auto-graduate as you spend.

Using your key

Include the X-API-Key header in every request:

curl -H "X-API-Key: tb_live_abc123def456..." \
  https://api.trythinkbase.com/v1/debates

Key format

Keys follow the format tb_live_ followed by 32 random hex characters:

tb_live_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4

Your key is shown once when created. Store it securely. We store only a SHA-256 hash of your key and cannot recover it.

Error responses

Missing key

{
  "error": "Missing API key",
  "message": "Include your API key in the X-API-Key header.",
  "docs": "https://docs.trythinkbase.com/authentication"
}

Status: 401 Unauthorized

Invalid or revoked key

{
  "error": "Invalid API key",
  "message": "The provided API key is not valid or has been revoked."
}

Status: 401 Unauthorized

Security

Keys are hashed with SHA-256 before storage. We never store or log raw keys.
All API traffic must use HTTPS.
If you suspect your key is compromised, contact us immediately to revoke it and issue a new one.

​Authentication

​Getting a key

​Using your key

​Key format

​Error responses

​Missing key

​Invalid or revoked key

​Security