Authentication
Two tiers
Company data endpoints require a key, so there is no anonymous access. A free account key receives every field a signed-in visitor sees on the website, including corporate email, phone and address, at 100 requests per rolling 24 hours. A Premium account key receives the complete record, including decision maker contacts, financial bands, certifications, technology and commercial signals, at 5,000 requests per rolling 24 hours.
Sending a key
Authorization: Bearer vk_live_...
# or
X-Api-Key: vk_live_...Keys are account-scoped. Create and revoke them on API keys. Up to 10 active keys per account.
Storage and safety
Only a SHA-256 hash and a short display prefix are stored, so a leaked database row cannot be replayed and a lost key cannot be recovered. Keep keys in server-side environment variables, never in browser code, repositories or URLs. Revocation takes effect on the next request.
MCP authorization
The remote MCP endpoint accepts the same bearer key in the client's header configuration. Without one, the client still works and sees public fields only.