# Authentication

# Authenticating with an API Key

You can authenticate your request by sending your API key in the `x-api-key` header of your request.

```
x-api-key: YOUR-API-KEY
```

In the following example, replace `YOUR-API-KEY` with your key:

```shell
curl --request GET \
  --url "https://connect.century.tech/api/v1/smart-ia/sessions" \
  --header "x-api-key: YOUR-API-KEY"
```

If you try to use an endpoint without a token or with a token that has insufficient permissions, you will receive a `401 Unauthorized` or `403 Forbidden` response.

> info
> **Keep your API Key Secret:** Please treat your API key like a password and avoid sharing it publicly 
> or including it in application code that is publicly accessible.