Skip to main content

​
API Key Authentication

60db uses API key authentication to secure all API requests. Your API key should be included in the Authorization header of every request.

​
Getting Your API Key

1

Login to Dashboard

Navigate to app.60db.com and log in
2

Access API Keys

Go to Settings → Developer → API Keys
3

Create Key

Click “Create API Key” and provide a descriptive name
4

Store Securely

Copy and store your API key in a secure location

​
Using Your API Key

​
With SDKs

import { SixtyDBClient } from '@60db-own/60db-js';

const client = new SixtyDBClient('your-api-key');
You can also specify a custom base URL:
const client = new SixtyDBClient({
  apiKey: 'your-api-key',
  baseUrl: 'https://custom-api.60db.com'
});

​
Direct API Calls

If you’re making direct HTTP requests, include your API key in the Authorization header: 
curl https://api-dev.qcall.ai/tts/voices \
  -H "Authorization: Bearer your-api-key"

​
Security Best Practices

Never expose your API key in client-side code, public repositories, or version control systems.

​
Environment Variables

Store your API key in environment variables:
Create a .env file:
SIXTYDB_API_KEY=your-api-key
Use it in your code:
const client = new SixtyDBClient(process.env.SIXTYDB_API_KEY);

​
Key Rotation

Regularly rotate your API keys for enhanced security:
  1. Create a new API key
  2. Update your application to use the new key
  3. Test that everything works correctly
  4. Delete the old API key

​
Rate Limiting

API requests are rate-limited based on your subscription plan:
PlanRequests per MinuteRequests per Day
Free101,000
Starter6010,000
Pro300100,000
EnterpriseCustomCustom
Rate limit headers are included in every API response:
  • X-RateLimit-Limit: Maximum requests allowed
  • X-RateLimit-Remaining: Remaining requests in current window
  • X-RateLimit-Reset: Time when the rate limit resets

​
Error Handling

When authentication fails, you’ll receive a 401 Unauthorized response: 
{
  "error": "Unauthorized",
  "message": "Invalid API key"
}
Common authentication errors:
Status CodeErrorDescription
401UnauthorizedInvalid or missing API key
403ForbiddenAPI key doesn’t have required permissions
429Too Many RequestsRate limit exceeded