> ## Documentation Index
> Fetch the complete documentation index at: https://partners.trybloom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate server-side requests with a Bloom API key.

Bloom issues a dedicated API key for each partner integration. Keep the key on
your server and never expose it in browser code, logs, source control, or agent
prompts.

Store it in your backend's secret manager:

```bash theme={null}
export BLOOM_API_KEY=bloom_sk_...
```

## Send the key

Use `x-api-key` unless your HTTP client requires a bearer token:

```http theme={null}
x-api-key: bloom_sk_...
```

```http theme={null}
Authorization: Bearer bloom_sk_...
```

Both headers authenticate the same key. Do not send both.

## Base URL

All Brand Skill endpoints use the production base URL:

```text theme={null}
https://www.trybloom.ai/api/v1
```

If a key may have been exposed, stop using it and contact Bloom for a
replacement. See the [API reference](/api-reference/brand-skills/create-a-brand-skill)
for the exact authentication and access errors.