Authentication

API Keys

All TinyFn API requests require authentication via an API key. Include your key in the X-API-Key header:

curl "https://api.tinyfn.io/v1/generate/uuid" \
  -H "X-API-Key: tfn_live_abc123..."

Never expose your API key in client-side code, public repositories, or anywhere it could be seen by others.

TinyFn API keys follow this format:

Prefix	Environment	Example
`tfn_live_`	Production	`tfn_live_abc123def456...`
`tfn_test_`	Testing	`tfn_test_xyz789...`

Use environment variables

Store your API key in environment variables, not in code:

export TINYFN_API_KEY="tfn_live_abc123..."

import os
api_key = os.environ.get('TINYFN_API_KEY')

Rotate keys regularly

You can generate new API keys from your dashboard. Rotate keys periodically and if you suspect a key has been compromised.

Use separate keys per environment

Use different API keys for development, staging, and production environments.

If authentication fails, you’ll receive a 401 Unauthorized response:

{
  "error": "Invalid API key",
  "code": "UNAUTHORIZED"
}

Common causes: