Authentication
Last updated: September 20, 2026
Each API request must contain an API key. This article shows how to send the key.
The Authorization header
Send the key as a bearer token in the Authorization header:
Authorization: Bearer YOUR_API_KEY
To get a key, see Create an API key.
The API host
Send all API requests to https://api.binlookupapi.com. The dashboard domain does not accept API requests.
Errors
| HTTP status | Error code | Cause |
|---|---|---|
| 401 | UNAUTHORIZED |
The header is missing, or the key is not valid, revoked, or expired. |
| 403 | FORBIDDEN |
The key does not have the permission for this endpoint. |
If you get a 401 error, see I get 401 Unauthorized.