Skip to main content
All API requests (except the registration endpoints) require a Bearer token in the Authorization header.

Header Format

Key Types

The key prefix determines routing automatically. There is no separate sandbox URL or environment toggle. See Environments for how isolation works.

Getting Your First Key

Register a sandbox account to receive your first API key:
The api_key field in the verification response is your key. It is shown once - store it securely.

Multiple Keys

Each account can have multiple named API keys, managed via the control panel. Use separate keys for different applications or environments to scope access and simplify rotation.

Key Rotation

Generate a new key in the control panel, update your application, then revoke the old key. Both keys work simultaneously during the transition.

Security

  • Store keys in environment variables or a secrets manager, not in source code
  • Use sandbox keys (mfx_test_) during development and testing
  • Rotate keys immediately if you suspect a leak
  • Each key is scoped to a single environment
Last modified on July 14, 2026