API Keys
Create and manage API keys for programmatic access to the RaxyProxy REST API.
Creating a key
Go to Dashboard → API Keys and click Create new key. Give it a descriptive name (e.g., scraper-prod), then click Generate.
Your key is shown once — copy it immediately. It will not be shown again. Keys follow the format:
raxy_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxThe prefix raxy_ is followed by 40 random alphanumeric characters.
Using a key
Pass the key as a Bearer token in the Authorization header of every API request:
curl https://raxyproxy.com/api/v1/account \
-H "Authorization: Bearer raxy_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"Keys are scoped to your account — they can list packages, retrieve stats, and generate proxy strings. They cannot modify account settings or make payments.
Security best practices
Never expose your API key
An API key grants read access to your account and proxy credentials. Treat it like a password — store it in environment variables or a secrets manager, never in source code or public repositories.
- Use a separate key per application or environment
- Store keys in environment variables (
RAXY_API_KEY=raxy_xxx...) - Add
.envto your.gitignore - Rotate keys periodically or immediately after a suspected leak
RAXY_API_KEY=raxy_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxRevoking a key
From Dashboard → API Keys, click the delete icon next to the key you want to revoke. Revocation is immediate — any request using that key will receive a 401 Unauthorized response.
If you suspect a key has been compromised, revoke it immediately and create a new one. Existing proxy sessions are unaffected — only API access is blocked.