AntifraudAI API Authentication: Bearer Token Setup

Every request to the AntifraudAI API must be authenticated. Authentication is handled via API keys passed as Bearer tokens in the Authorization header. You can find and manage your API keys in the AntifraudAI Dashboard. There are two types of keys — sandbox and production — each scoped to their respective environment.

Never include API keys in client-side code, mobile app bundles, or public repositories. API keys grant full access to your AntifraudAI account. If a key is exposed, revoke it immediately from the dashboard and issue a new one.

Bearer Token Authentication

Pass your API key in the Authorization header of every request using the Bearer scheme:

Authorization: Bearer sk_live_xxxxxxxxxxxxxxxxxxxx

curl --request POST \
  --url https://api.antifraudai.com/v1/transactions/screen \
  --header 'Authorization: Bearer sk_live_xxxxxxxxxxxxxxxxxxxx' \
  --header 'Content-Type: application/json' \
  --data '{
    "user_id": "user_8821",
    "amount": 149.99,
    "currency": "USD"
  }'

import requests

headers = {
    "Authorization": "Bearer sk_live_xxxxxxxxxxxxxxxxxxxx",
    "Content-Type": "application/json",
}

payload = {
    "user_id": "user_8821",
    "amount": 149.99,
    "currency": "USD",
}

response = requests.post(
    "https://api.antifraudai.com/v1/transactions/screen",
    headers=headers,
    json=payload,
)

print(response.json())

const response = await fetch(
  "https://api.antifraudai.com/v1/transactions/screen",
  {
    method: "POST",
    headers: {
      Authorization: "Bearer sk_live_xxxxxxxxxxxxxxxxxxxx",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      user_id: "user_8821",
      amount: 149.99,
      currency: "USD",
    }),
  }
);

const data = await response.json();
console.log(data);

Sandbox vs. Production Keys

Prefix	Environment	Billing	Base URL
`sk_test_`	Sandbox	Never billed	`https://sandbox.antifraudai.com/v1`
`sk_live_`	Production	Billed per request	`https://api.antifraudai.com/v1`

Sandbox and production keys are not interchangeable. Sending a sk_test_ key to the production base URL — or vice versa — will return a 401 authentication_failed error.

Authentication Errors

When authentication fails, the API returns a 4xx HTTP status with a JSON error body. The two most common authentication errors are:

HTTP Status	Error Code	Cause
`401 Unauthorized`	`authentication_failed`	API key is missing, malformed, or has been revoked
`403 Forbidden`	`insufficient_permissions`	The key is valid but lacks permission for the requested action

Example error response:

{
  "error": {
    "code": "authentication_failed",
    "message": "The API key provided is invalid or has been revoked. Please check your key and try again."
  }
}

Store your API key in an environment variable (e.g., ANTIFRAUD_API_KEY) and read it at runtime rather than hard-coding it. This keeps it out of source control and makes key rotation a one-line config change.

Overview

Endpoints

AntifraudAI API Authentication: Bearer Token Setup

Bearer Token Authentication

Sandbox vs. Production Keys

Authentication Errors

​Bearer Token Authentication

​Sandbox vs. Production Keys

​Authentication Errors

Bearer Token Authentication

Sandbox vs. Production Keys

Authentication Errors