All API endpoints require Bearer token authentication using an API key.
How to authenticate with API keys
Include your API key in the Authorization header on every request:
Authorization: Bearer YOUR_API_KEY
API key scopes and permissions
API keys use scope-based access control. All scopes are enabled by default:
| Scope | Access |
|---|
read | All content (articles, stories, companies, categories, countries, exchanges, indices, sources, search) |
read:watchlist | Read your watchlists and their companies |
Rate limits and usage quotas
The API enforces hourly rate limits and monthly usage quotas per API key. Your current limits and usage are visible in your API key settings.
Every response includes headers so you can track usage proactively:
| Header | Description |
|---|
X-RateLimit-Limit | Maximum requests per hour |
X-RateLimit-Remaining | Requests remaining this hour |
X-RateLimit-Reset | Seconds until the hourly limit resets |
X-Monthly-Limit | Your plan’s monthly allowance |
X-Monthly-Remaining | Requests remaining this month |
X-Monthly-Reset | ISO 8601 timestamp when the monthly limit resets |
429 Too Many Requests with a Retry-After header. See error handling for details on handling 429 responses.
304 Not Modified responses from ETag caching do not count against your monthly quota. Last modified on April 18, 2026
