Authentication

The Duro GraphQL API uses Bearer token and API key (via x-api-key header) authentication. All API requests must include an authorization token in the header.

Obtaining an API Authentication Token

To get started with the Duro API, you'll need to:

1. Create a Duro account at durohub.com

2. Navigate to your account settings

3. Generate an API token from the Developer section

4. Your URL to get an API key is: https://durohub.com/org/@<your org slug>/libs/<your library slug>/settings/api-keys

API Key Created Window

Using the Token

Include your API token in all requests using the x-api-key header:

x-api-key: YOUR_API_TOKEN

Token Security

• Never share your API tokens

• Rotate tokens regularly

• Use different tokens for development and production

• Store tokens securely in environment variables

Never commit API tokens to version control or expose them in client-side code.

Next Steps

Learn how to make your first API call in the Hello World guide.