Authentication

Create an API key and store it in your server environment or CI secret store.

export hashirapikey="your-api-key"

Bearer authentication

Include the key in the Authorization header on every request, including status checks and downloads.

curl --fail-with-body "https://api.hashisoft.com/v1/account" \
  --header "Authorization: Bearer $hashirapikey"

Keep keys private

Keep keys out of browser code and public repositories. New keys are shown once. Disable or delete a key when it should no longer be used.