Authentication
Authenticate xbapi requests with a bearer API key.
Every API request must include an API key in the Authorization header.
Authorization: Bearer xb-xxxxxxxxKeep keys secret
API keys authorize billable generation requests. Never expose them in browser code, mobile applications, public logs, or source control.
Send requests from your own server and store the key in a secret manager or protected environment variable.
Example request
curl https://api.xbaiapi.com/api/v1/jobs/recordInfo?taskId=xb_xxx \
-H "Authorization: Bearer xb-xxxxxxxx"Authentication errors
| Status | Meaning | Action |
|---|---|---|
401 | Missing or invalid API key | Check the header and key value |
403 | Customer account is suspended | Contact support |