Send your key as a bearer token on every request. The same key works for REST, the stream and your AI assistant.
Your key
Keys come from Account on the site. A key is yours alone: used from too many addresses or devices at once, it’s revoked and support issues a new one.
Your API key is for your own use. Data you receive through the API, including values derived from it, is covered by your market data agreement and may not be redistributed. Real-time data requires accepting the subscriber agreement and stating whether you are a Professional or Nonprofessional subscriber.
Browsers never see your key. Proxy REST through your server, and give a streaming page a one-use ticket.
Ticker access
GET /v1/me and GET /v1/status include ticker_access. allow_all permits every ticker except restricted. allow_only permits only allowed.
A ticker outside your access answers 403 ticker_not_allowed. A restricted key asking for market-wide data or a bulk export answers 403 ticker_scope_required.