Documentation Index
Fetch the complete documentation index at: https://docs.pictify.io/llms.txt
Use this file to discover all available pages before exploring further.
Authentication
All API requests require authentication using an API key passed in theAuthorization header.
API Keys
API keys are created in your dashboard settings. Each key is associated with your team and has access to all team resources.Creating an API Key
- Navigate to Settings > API Keys in the dashboard
- Click Create API Key
- Give your key a descriptive name (e.g., “Production Server”, “Development”)
- Copy the key immediately - it won’t be shown again
Using Your API Key
Include your API key in theAuthorization header as a Bearer token:
SDK Configuration
API Key Types
| Prefix | Type | Environment |
|---|---|---|
pk_live_ | Production | Live API access |
pk_test_ | Test | Sandbox environment |
Security Best Practices
Environment Variables
Never hardcode API keys. Use environment variables:Server-Side Only
API keys should only be used in server-side code. Never include them in:- Client-side JavaScript
- Mobile apps
- Public repositories
- Browser localStorage/cookies
Key Rotation
If you suspect a key has been compromised:- Create a new API key in the dashboard
- Update your application to use the new key
- Delete the compromised key
Least Privilege
Create separate API keys for different environments and services:- Production server
- Staging server
- CI/CD pipeline
- Local development
Rate Limits
API requests are rate limited by API key:| Plan | Requests per Minute | Requests per Day |
|---|---|---|
| Free | 60 | 1,000 |
| Pro | 300 | 10,000 |
| Business | 1,000 | 100,000 |
| Enterprise | Custom | Custom |
429 Too Many Requests response with a Retry-After header:
Team API Keys
API keys are scoped to your team. All team members share access to the same API keys and resources. To manage team members:- Go to Settings > Team
- Invite members by email
- Assign roles (Admin, Editor, Viewer)
Troubleshooting
Invalid API Key
- Verify the key is copied correctly (no extra spaces)
- Check if the key has been deleted in the dashboard
- Ensure you’re using the correct environment (test vs production)
Missing Authorization Header
- Add the
Authorization: Bearer {api_key}header - Check for typos in the header name