Authentication

All API requests to Gro must be authenticated using an API key. This page covers the authentication mechanisms available.

API Key Header

Pass your API key in the X-API-Key header:

curl -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  https://api.usegro.co/api/subscriptions

You can also try requests in the interactive API explorer.

Key Types and Permissions

Key Type	Can access API?	Use case
SDK	No	Browser-side tracking only
API	Yes	Server-to-server integrations

Only API keys can authenticate backend API requests. SDK keys are rejected with a 401 Unauthorized response.

Getting an API Key

1. Navigate to Settings → API Keys in the Gro dashboard
2. Click Create API Key and select the API type
3. Copy the key immediately — it’s only shown once

For more details, see API Keys.

Rate Limiting

API requests are rate-limited per account. If you exceed the limit, you’ll receive a 429 Too Many Requests response. Back off and retry with exponential delay.

Full API Reference

See the API Reference for all available endpoints, request/response schemas, and examples.