Authentication - Rhizome AI

API Keys

All API requests require an API key passed in the x-api-key header.

curl https://rhizomeai.com/api/v3/datasets \
  -H "x-api-key: YOUR_API_KEY"

API access requires an enterprise plan. Contact support@rhizomeai.com to upgrade your account.

API keys should only be used in server-side code. Never include them in JavaScript running in the browser.

Store your API key in environment variables, not in source code.

export RHIZOME_API_KEY="your-api-key"

import os
api_key = os.environ["RHIZOME_API_KEY"]

If you suspect your API key has been compromised, delete it immediately from the API Keys console and create a new one.

Status	Code (v3)	Legacy `error`	Description
401	`missing_api_key`	`Missing or invalid x-api-key header`	No API key provided
401	`invalid_api_key`	`Invalid API key`	The API key doesn’t exist or was deleted
429	`rate_limited`	`Rate limit exceeded`	Too many requests (see Rate Limits)

API v3 answers errors as {"error": {"code", "message", "request_id"}}; the legacy endpoints as {"error": "<message>"}. See Errors.