Send a bearer token in the Authorization header with every request.

Authorization: Bearer YOUR_API_KEY

Example:

curl -X GET https://api.coreapi.com/v1/me   -H "Authorization: Bearer YOUR_API_KEY"

Keep your API key secret. Best practices: separate keys by environment, rotate regularly, store server‑side only.