Crawleo Documentation

API Key Authentication

All Crawleo API requests require authentication using your API key.

Getting Your API Key

Create an Account

Choose a Plan

Subscribe to a plan at crawleo.dev/pricing.

Copy Your Key

Access your API key from the dashboard.

Using Your API Key

Include your API key in one of the following headers — both methods are equivalent:

Method	Header	Format
Bearer Token	`Authorization`	`Bearer YOUR_API_KEY`
X-API-Key	`x-api-key`	`YOUR_API_KEY`

Example Requests

curl -X GET "https://api.crawleo.dev/search?query=hello" \
  -H "Authorization: Bearer YOUR_API_KEY"

curl -X GET "https://api.crawleo.dev/search?query=hello" \
  -H "x-api-key: YOUR_API_KEY"

import requests

response = requests.get(
    "https://api.crawleo.dev/search",
    params={"query": "hello"},
    headers={"Authorization": "Bearer YOUR_API_KEY"}
)

data = response.json()
print(data)

const response = await fetch(
  "https://api.crawleo.dev/search?query=hello",
  {
    headers: {
      "Authorization": "Bearer YOUR_API_KEY"
    }
  }
);

const data = await response.json();
console.log(data);

Security Best Practices

Never expose your API key in client-side code or public repositories.

Use Environment Variables

Store your API key in environment variables rather than hardcoding it:

export CRAWLEO_API_KEY="your_api_key_here"

import os
api_key = os.environ.get("CRAWLEO_API_KEY")

const apiKey = process.env.CRAWLEO_API_KEY;

Server-Side Only

Make API calls from your backend server, not from browser-based JavaScript. Client-side requests would expose your API key to anyone inspecting the page source.

Rotate Keys Regularly

Periodically rotate your API keys, especially if you suspect they may have been compromised. You can regenerate keys from the dashboard.

Error Responses

When authentication fails, you’ll receive one of these error responses:

Status Code	Description	Cause
`401`	Unauthorized	Invalid or missing API key
`403`	Forbidden	API key doesn’t have access to this resource
`429`	Too Many Requests	Credits exhausted or concurrent limit reached

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or missing API key."
  }
}

Credits & Pricing

Learn about credit costs, plans, and rate limits.

API Reference

See the full API documentation.

Getting Started

API Overview

Search APIs

Crawling APIs

Core Concepts

MCP Integration

Integrations

Authentication

API Key Authentication

Getting Your API Key

Using Your API Key

Example Requests

Security Best Practices

Error Responses

Credits & Pricing

API Reference

​API Key Authentication

​Getting Your API Key

​Using Your API Key

​Example Requests

​Security Best Practices

​Error Responses

Credits & Pricing

API Reference

API Key Authentication

Getting Your API Key

Using Your API Key

Example Requests

Security Best Practices

Error Responses