Skip to main content
Use this when your application (or the API layer being tested) authenticates requests using a static API key, typically passed as a header.

​
What to provide

API Key: your-api-key-here
Header name: Authorization
Header format: Bearer {key}
Common header formats:
HeaderFormatExample
AuthorizationBearer {key}Authorization: Bearer sk-abc123
AuthorizationApiKey {key}Authorization: ApiKey abc123
X-API-Key{key}X-API-Key: abc123
CustomvariesX-Internal-Token: abc123
Specify the exact header name and format your application expects.

​
Multiple API keys for role testing

If your application scopes API key permissions (e.g. read-only vs read-write keys), add a separate test user entry for each permission level. Label them clearly:
  • “API key, read only”
  • “API key, admin”