Bearer tokens. Every request needs one. 
Authorization: Bearer sd_sk_abc123xyz789
Get Your Key - Takes 2 minutes

ā€‹
Production Setup

Client-side JavaScript? Stop. Keys belong in environment variables.
# .env
SUPERDOC_API_KEY=sd_sk_production_key

# Your backend
const apiKey = process.env.SUPERDOC_API_KEY
Different keys for dev and production. Rotate quarterly.