Glossary

API key

A secret string a program sends with each request to prove which client it is.

At OneLifeVibe

• Platform API keys start with olvp_ and carry a public prefix (olvp_abc123_) shown in the console, so keys can be told apart without the secret. The secret part is 32 random characters.
• The platform stores only a SHA-256 hash, so a key is shown once and cannot be recovered: rotate by creating a new key and revoking the old one. Send it as Authorization: Bearer olvp_… or X-API-Key: olvp_….

Related terms

• API key scopes and worlds
• Rate limiting and quotas