Xác thực

API keys

Every request to https://api.cheapvids.com/v1 carries an API key as a bearer token:

Authorization: Bearer cv_live_YOUR_KEY

A key looks like cv_live_ followed by 43 characters. Keys belong to your account, not to a plan group: the same key can use plan: "studio" and plan: "credits" (see Plans).

Getting a key

API keys unlock after your first USDT payment. Until then the key page shows a hint and creating a key answers 403 first_payment_required. Trial credits cannot be used through the API.

• Create keys on the developer page of your account. You can have up to 10 active keys, each with a name.
• The full key is shown once, when you create it. CheapVids stores only a hash, so a lost key cannot be recovered: revoke it and create a new one.
• Revoking a key takes effect immediately.
• The list shows the first 12 characters of each key (for example cv_live_Ab3d...) and the last time it was used.

Keep keys secret

• Use keys only from your server. Never put a key in a web page, a mobile app or a public repository: anyone who sees it can spend your credits.
• Keep a key in an environment variable or a secret manager.
• If a key may have leaked, revoke it. When one key is used from more than 20 different IP addresses within an hour, CheapVids sends you an in-app notification.

Errors

All errors use the same envelope, described in Errors.