Authentication

The cloro API uses Bearer token authentication to secure API endpoints. You’ll need to include your API key in the Authorization header of every request.

Getting your API key

Manage your API keys in the dashboard. You can create new keys, view usage, and manage your account settings. Once you receive your API key:

Store your API key securely. Keep it confidential
Never expose your API key in client-side code or public repositories

Never expose your API key in client-side code, public repositories, or share it with unauthorized users.

Using your API key

The Bearer token in the Authorization header is your API key — there’s no separate token exchange or OAuth flow. Copy the key from the dashboard and pass it directly with the Bearer prefix:

Authorization: Bearer YOUR_API_KEY

Example requests

curl -X POST https://api.cloro.dev/v1/monitor \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"prompt": "Your prompt here", "model": "CHATGPT"}'

import requests

headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json"
}

response = requests.post(
    "https://api.cloro.dev/v1/monitor",
    headers=headers,
    json={"prompt": "Your prompt here", "model": "CHATGPT"}
)

const headers = {
  Authorization: "Bearer YOUR_API_KEY",
  "Content-Type": "application/json",
};

const response = await fetch("https://api.cloro.dev/v1/monitor", {
  method: "POST",
  headers: headers,
  body: JSON.stringify({ prompt: "Your prompt here", model: "CHATGPT" }),
});

client := &http.Client{}
req, _ := http.NewRequest("POST", "https://api.cloro.dev/v1/monitor", body)
req.Header.Add("Authorization", "Bearer YOUR_API_KEY")
req.Header.Add("Content-Type", "application/json")
resp, _ := client.Do(req)

Authentication errors

If authentication fails, you’ll receive a 401 Unauthorized response:

{
  "success": false,
  "error": "Invalid or missing API key"
}

Common authentication issues:

Missing Bearer prefix: Make sure to include Bearer before your API key
Invalid API key: Check that you’re using the correct API key
Expired API key: Some API keys may have expiration dates
Rate limit exceeded: You’ve exceeded your plan’s rate limit

Environment variables

We recommend storing your API key in environment variables:

CLORO_API_KEY=your_api_key_here

import os
api_key = os.getenv('CLORO_API_KEY')

const apiKey = process.env.CLORO_API_KEY;

apiKey := os.Getenv("CLORO_API_KEY")

API key management

Regenerating keys

If you suspect your API key has been compromised, you can revoke and generate new keys directly in the dashboard.

Multiple API keys

You can create multiple API keys in the dashboard for different purposes:

Production: For your live application
Development: For local development and testing
CI/CD: For automated testing and deployment
Team members: Individual keys for team access

Need help?

If you’re having trouble with authentication:

Check our API Reference
Contact support at support@cloro.dev

Introduction

Guides

Integrations

Authentication

Getting your API key

Using your API key

Example requests

Authentication errors

Environment variables

API key management

Regenerating keys

Multiple API keys

Need help?

​Getting your API key

​Using your API key

​Example requests

​Authentication errors

​Environment variables

​API key management

​Regenerating keys

​Multiple API keys

​Need help?

Getting your API key

Using your API key

Example requests

Authentication errors

Environment variables

API key management

Regenerating keys

Multiple API keys

Need help?