Skip to content
AcresiftAcresift

Authentication with API keys

Team plan

Keys come with the Team plan. For now Acresift makes them for you: write to us with a name for the key (where it will be used).

Get a key

We send you a key that starts with ak_. It’s shown once: we keep only a scrambled fingerprint of it (a SHA-256 hash), so a lost key can’t be recovered, only replaced.

Use it

Send the key in the Authorization header of every request:

Terminal window
curl https://api.acresift.com/v1/parcels/37105012685 \
  -H "Authorization: Bearer ak_..."

A missing, wrong or revoked key gets 401 Unauthorized. GET /v1/coverage, GET /v1/sources, /openapi.json and /docs need no key.

What a key can see

Parcel data including the owner name and tax-bill mailing address. These are public records, the same fields the app shows paying users. The public calls never return owner names or addresses.

Keep it safe

  • Treat a key like a password. Anyone with it can use your plan’s API allowance.
  • Keep keys on a server, in an environment variable or a secrets store. Never put one in a web page, a mobile app or a shared spreadsheet.
  • Ask for one key per tool, so one can be revoked without breaking the others.

Revoke a key

Write to us and we revoke it. It stops working straight away.