Authentication

All requests are authenticated with an API key sent in the X-API-Key header.

Base URL

https://api.scrapewithruno.com/v1

Header

X-API-Key: sk_live_...

A request with no key, an unknown key, a revoked key, or a key whose owner is suspended is rejected at the edge before it reaches any worker.

Key Types

Type	Prefix	Schema Source	Use Case
Dynamic	sk_live_	schema in every request body	Ad-hoc extraction, varying shapes
Static	sk_static_	Bound to the key at creation	Production

Mismatch rules:

Situation	Result
Dynamic key called without schema	422 SCHEMA_REQUIRED
Static key called with inline schema	400 SCHEMA_NOT_ALLOWED

The full key string is shown only once at creation in the dashboard. Subsequent reads are masked (...XXXX). Lose a key? Revoke and recreate, there's no recovery.

Plan Caps on Active Keys

Each plan limits how many keys can be active at the same time:

Tier	Active Keys
Free	2
Starter	5
Pro	20
Scale	∞

Hitting the cap returns KEY_LIMIT_REACHED. Revoke unused keys from the dashboard.

Where Keys Come From

API keys are created, edited, and revoked through the dashboard at scrapewithruno.com. There is no public REST endpoint for key management.

Rotating a Key

1. Create a replacement in the dashboard.
2. Roll it out across your environment.
3. Revoke the old key once nothing's using it.

There's no built-in "expire". Keys live until you revoke them or the account is closed.