# Authentication

<figure><img src="https://1835787252-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV8CtRF59w8oxkhPMGwwB%2Fuploads%2FrMDySw1HQe2YUCT76u5a%2FChatGPT%20Image%209%20avr.%202025%2C%2009_30_52.png?alt=media&#x26;token=11325f7f-4604-406c-8d6b-c8c63787364f" alt="" width="375"><figcaption></figcaption></figure>

The MadKudu API uses API keys to authenticate requests. Follow [this article ](https://developers.madkudu.com/getting-started/quickstart)to get your API key.

All API requests must be made over [HTTPS](http://en.wikipedia.org/wiki/HTTP_Secure). Calls made over plain HTTP will fail.&#x20;

The API Key must be passed in the `X-API-Key` header for **every requests**. API requests without authentication will also fail.
