Authentication

All API requests authenticate with a single header:

curl -H "X-Api-Key: pb_yourkey" https://polybk.com/v1/coverage

Creating keys

Keys are created in your dashboard. You can have multiple keys — label them by project (my-bot, backtester) and revoke any of them at any time.

Keys are shown once

The full key is displayed only at creation. Store it immediately — the dashboard shows only the prefix afterwards (e.g. pb_a1b2c3…).

Rules

• One header: X-Api-Key: <key>. No OAuth, no tokens-in-URL.
• Treat keys like passwords. Anyone with your key can use your plan's quota.
• Lost a key? Revoke it in the dashboard and create a new one — takes seconds.

Rate limits

Limits are per key, by plan:

Plan	Requests / minute
Starter	300
Pro	600

Exceeding the limit returns 429 — wait a minute and retry. For bulk work, prefer /v1/windows.csv (one request downloads a whole market window) over row-by-row calls.