Authentication
All enrichment endpoints require an API key (sk_<64 hex>) passed via X-API-Key header.
Every request must carry an API key. Two equivalent headers are accepted:
X-API-Key: sk_…Authorization: ApiKey sk_…
Keys are scoped per-tenant and per-permission (enrich, enrich_bulk, history). Create or revoke keys from the VerdictIQ dashboard.
Storage
The Try-It panel stores your key in browser localStorage only. It is never sent to VerdictIQ's marketing servers.