Skip to main content

API Authentication

All Helix API requests require authentication using an API key. This guide explains how to obtain and use your API key to access the platform.

Overview​

The Helix API uses API key authentication via the Authorization header. Each API key grants access to all endpoints and resources.

Obtaining an API Key​

API keys are provisioned by the Helix team. Contact support to request an API key.

Using Your API Key​

Authentication Header​

Include your API key in the Authorization header of every API request using the Bearer authentication scheme:

Authorization: Bearer YOUR_API_KEY

Example Requests​

curl https://api.feeds.onhelix.ai/feeds/news \
  -H "Authorization: Bearer YOUR_API_KEY"

Authentication Errors​

401 Unauthorized​

If your API key is invalid or missing, you'll receive a 401 Unauthorized response:

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or missing API key"
  }
}

Common causes:

  • Missing Authorization header
  • Incorrect API key format
  • Expired or revoked API key
  • Using HTTP instead of HTTPS

Solutions:

  1. Verify your API key is correct
  2. Ensure the Authorization header is properly formatted: Bearer YOUR_API_KEY
  3. Check that you're using HTTPS, not HTTP

403 Forbidden​

If you're authenticated but don't have permission to access a resource:

{
  "success": false,
  "error": {
    "code": "FORBIDDEN",
    "message": "You don't have permission to access this resource"
  }
}

API Key Scopes​

Each API key has access to:

  • News feed endpoints: Create, read, update, and delete news feeds
  • Event feed endpoints: Create, read, update, and delete event feeds
  • Fact-checking endpoints: Submit and retrieve fact-check requests
  • Feed item endpoints: Retrieve content from your feeds
  • Webhook endpoints: Configure webhook notifications