API Authentication
The Audioscrape API uses Bearer token authentication. All API requests must include your API key in the Authorization header to access protected endpoints.
Machine-readable spec: for the always-current OpenAPI definition, see the interactive Swagger UI or download /api/openapi.json.
There is no OAuth token exchange for the REST API
API keys are sent directly as Authorization: Bearer headers — do not
POST your key or credentials to /oauth/token. The /oauth/*
endpoints exist solely for
MCP connector
sign-in flows and will reject REST API clients.
Getting your API key ¶
Keys are issued from your account settings and shown exactly once at creation.
-
1
Sign In
Log in to your Audioscrape account at audioscrape.com
-
2
Go to API Keys
Navigate to Profile → API Keys
-
3
Create a Key
Click "Create New Key" and give it a descriptive name
-
4
Copy Your Key
Copy the key immediately - it will only be shown once
Using your API key ¶
Include your API key in the Authorization
header as a Bearer token — the same header works from any language or HTTP client.
curl -X POST "https://www.audioscrape.com/api/search" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"query": "artificial intelligence"}'const response = await fetch('https://www.audioscrape.com/api/search', {
method: 'POST',
headers: {
'Authorization': 'Bearer YOUR_API_KEY',
'Content-Type': 'application/json'
},
body: JSON.stringify({
query: 'artificial intelligence'
})
});
const data = await response.json();import requests
response = requests.post(
'https://www.audioscrape.com/api/search',
headers={
'Authorization': 'Bearer YOUR_API_KEY',
'Content-Type': 'application/json'
},
json={
'query': 'artificial intelligence'
}
)
data = response.json()Error responses ¶
Authentication failures return a JSON body with an error and a
message field.
# Missing or invalid API key
{"error": "Unauthorized", "message": "Invalid or missing API key"}# API key is valid but lacks required permissions
{"error": "Forbidden", "message": "Insufficient permissions"}# Rate limit exceeded
{"error": "Rate Limited", "message": "Too many requests", "retry_after": 60}Security best practices ¶
- • Never expose your API key in client-side code or public repositories
- • Use environment variables to store API keys
- • Rotate your API keys periodically
- • Delete unused API keys from your account
Rate limits ¶
API rate limits vary by subscription plan:
See pricing for full details on each plan.
Need help? ¶
Having trouble with authentication? Contact us at [email protected].