Authentication
Authenticate requests with NaijaRadar API keys.
Create API keys in the developer console. Each key is scoped to one NaijaRadar account and can be renamed, rotated, or revoked.
Send the key
Use the X-API-Key header:
curl "https://api.naijaradar.ng/v1/flights" \
-H "X-API-Key: nr_live_your_key"Or use a bearer token:
curl "https://api.naijaradar.ng/v1/flights" \
-H "Authorization: Bearer nr_live_your_key"API keys are secrets. Store them in server-side environment variables. Do not put them in browser JavaScript, mobile app binaries, or public repositories.
Key format
Keys begin with nr_live_ and contain a public identifier followed by a secret.
nr_live_<public-id>.<secret>NaijaRadar stores only a one-way hash of the full key. If you lose a secret, rotate the key and update your application.
Limits
- Each account can have up to 5 active keys.
- Rotating a key immediately invalidates the old secret.
- Revoking a key cannot be undone.