Authentication

The production API is available at https://api.ie.intrace.ai/. Authenticated endpoints accept a provisioned API key in either header form.

Primary form:

X-API-Key: intrace_live_...

Bearer form:

Authorization: Bearer intrace_live_...

The capability endpoints require authentication. /healthz and /readyz are operational endpoints and are not authenticated in the OpenAPI contract.

Error responses

Missing or invalid keys return the standard error envelope:

{
  "error": {
    "code": "missing_api_key",
    "message": "An API key is required",
    "retryable": false
  }
}

{
  "error": {
    "code": "invalid_api_key",
    "message": "The supplied API key is invalid",
    "retryable": false
  }
}