Back to glossary
Factors, macro, and AI/API
API Key explained for investors
An API key is the credential layer for programmatic access. Treat it like a production secret, not a browser token.
Get Free API KeyUpdated June 18, 2026
Definition
An API key is a secret credential used to authenticate requests to SEC API for AI programmatic endpoints, commonly sent in the x-api-key header.
Investor read
For teams building research systems, API-key hygiene is operational risk control. Keys should be scoped, stored securely, rotated when needed, and separated by environment.
Where it appears
- Developer setup, SDK configuration, CLI usage, and server-side integrations.
- Account, organization, and API-key management workflows.
- Usage and billing attribution.
SEC API workflow
- Create an API key after signup.
- Send it through the x-api-key header from trusted server-side code or controlled automation.
- Monitor usage and rotate keys when access changes.
curl -H "x-api-key: $SECAPI_API_KEY" https://api.secapi.ai/v1/filings/latest?ticker=AAPLCommon traps
- Committing keys to source control.
- Putting production keys in public client bundles.
- Confusing API keys with user session cookies or OAuth callback tokens.
Key takeaways
- API keys authenticate programmatic access.
- Use the x-api-key header.
- Treat keys as secrets with ownership and rotation discipline.