Authentication

API Keys

All API requests require authentication via a Bearer token in the Authorization header:

Authorization: Bearer lp_xxx_yyy

API keys are created in the dashboard and follow the format lp_{project_id}_{secret}.

Land uses a hierarchical access model:

Each API key inherits the permissions and rate limits of its parent project.

Use the auth context endpoint to verify your API key and see your tenant identity:

curl https://api2.tryland.eu/auth/context \
  -H "Authorization: Bearer lp_xxx_yyy"

{
  "tenant_id": "org_abc123",
  "caller_id": "key_def456"
}

Or with the SDK:

const identity = await land.getAuthContext();
console.log(identity.tenant_id); // "org_abc123"

Tier	Requests/Day	Requests/Second
Free	10,000	1

When you exceed your rate limit, the API returns a 429 Too Many Requests response. Contact [email protected] for higher limits.

Never expose API keys in client-side code. Use a backend proxy to make API calls.
Rotate keys regularly. Create a new key, update your services, then revoke the old one.
Use separate keys for each environment. Create distinct projects for production and staging.
Monitor usage in the dashboard to detect unusual activity.