> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cccambox.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Learn how to authenticate requests to the CCCAMBOX TV Reseller API using your API key.

The CCCAMBOX TV Reseller API uses API keys to authenticate every protected
request.

To create and manage keys, see [API Keys](/doc/api-keys).

## Send your API key

Include your API key in the `x-api-key` HTTP header on every authenticated
request:

```http theme={null}
x-api-key: YOUR_API_KEY
```

If you store the key in an environment variable, you can reference it directly
in your requests:

```bash theme={null}
export CCCAMBOX_TV_API_KEY="YOUR_API_KEY"

curl --request GET \
	--url https://api.reselliptv.com/v1/me \
	--header "x-api-key: $CCCAMBOX_TV_API_KEY"
```

## HTTPS is required

All API requests must be sent over [HTTPS](http://en.wikipedia.org/wiki/HTTP_Secure).
Plain HTTP requests are rejected.

## Authentication failures

If your API key is missing, invalid, or no longer active, the API will usually
return a `401 Unauthorized` response.

If authentication fails, check the following first:

* The `x-api-key` header is present
* The key value is correct and complete
* The request is being sent over HTTPS
* You are using the key for the intended account or environment

## Security guidance

* Keep API keys in server-side environments only
* Do not expose them in frontend code, public repositories, or screenshots
* Store them in environment variables, a password manager, or a secrets manager
* Rotate keys immediately if you think a key has been exposed

When a new API key is created, it is shown only once in the dashboard. Copy it
immediately and store it safely.