- APIs
- Designcombo API
- Authentication
Authentication
Learn how to authenticate your requests to the DesignCombo API.
Authentication
All API requests require authentication using a Bearer token. Include your API key in the Authorization
header of every request.
Basic Authentication
Terminal
$curl -X POST 'https://api.designcombo.dev/v1/text-to-speech' \-H 'Authorization: Bearer YOUR_API_KEY' \-H 'Content-Type: application/json' \-d '{"text": "Hello world", "voiceId": "69nXRvRvFpjSXhH7IM5l"}'
Getting Your API Key
- 1Sign up at designcombo.dev
- 2Navigate to your dashboard
- 3Generate a new API key
- 4Keep your API key secure and never expose it in client-side code
API Key Format
Your API key should be a 64-character string that looks like this:
dc_live_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef
type: warning
Security Best Practices
- Never commit API keys to version control
- Use environment variables to store API keys
- Rotate your API keys regularly
- Monitor your API usage for suspicious activity
- Use different keys for development and production
Environment Variables
Store your API key securely using environment variables:
# .env fileDESIGNCOMBO_API_KEY=dc_live_your_api_key_here
// JavaScript/Node.jsconst apiKey = process.env.DESIGNCOMBO_API_KEY;const response = await fetch('https://api.designcombo.dev/v1/text-to-speech', {method: 'POST',headers: {'Authorization': `Bearer ${apiKey}`,'Content-Type': 'application/json'},body: JSON.stringify({text: 'Hello world',voiceId: '69nXRvRvFpjSXhH7IM5l'})});
# Pythonimport osimport requestsapi_key = os.environ.get('DESIGNCOMBO_API_KEY')response = requests.post('https://api.designcombo.dev/v1/text-to-speech',headers={'Authorization': f'Bearer {api_key}','Content-Type': 'application/json'},json={'text': 'Hello world','voiceId': '69nXRvRvFpjSXhH7IM5l'})
Testing Your API Key
You can test your API key by making a simple request to the voices endpoint:
Terminal
$curl -H "Authorization: Bearer YOUR_API_KEY" \https://api.designcombo.dev/v1/voices
If your API key is valid, you'll receive a list of available voices. If it's invalid, you'll get a 401 Unauthorized
response.
API Key Permissions
Different API keys can have different permissions:
- Read-only keys - Can only retrieve data
- Write keys - Can create and modify resources
- Admin keys - Full access to all endpoints
Key Rotation
For security, rotate your API keys regularly:
- 1Generate a new key in your dashboard
- 2Update your applications to use the new key
- 3Test the new key with a simple request
- 4Delete the old key once everything is working
Troubleshooting
Issue | Solution |
---|---|
401 Unauthorized | Check that your API key is correct and not expired |
403 Forbidden | Verify your API key has the required permissions |
Key not working | Regenerate your API key in the dashboard |
Need help with authentication?
- Check your API key format and validity
- Ensure you're using the correct Authorization header
- Verify your account has sufficient credits
- Contact support if issues persist