API Authentication Guide: Secure Your API Keys and Credentials

Your API key is like a password to your SMM panel account. Lose it, and someone can drain your balance. This guide shows you how to secure it, rotate it, and use it safely.

Step 1: Generate Your API Key

In your CurvePioneer dashboard:

1. Go to Settings → API Keys
2. Click Generate New Key
3. Choose a name (e.g., "Production API")
4. Select expiration date (365 days recommended)
5. Copy the key immediately (you won't see it again)

Step 2: Store Your Key Safely

❌ Wrong: Hardcode in code

✅ Right: Environment variables

Step 3: Use the API Securely

Example: Place an Order

curl -X POST https://api.curvepioneer.com/v1/orders \
  -H "Authorization: Bearer sk_live_abc123" \
  -H "Content-Type: application/json" \
  -d '{
    "service_id": "instagram_followers",
    "link": "https://instagram.com/yourprofile",
    "quantity": 100,
    "delivery_curve": "organic_24h"
  }'

API Key Rotation (Best Practice)

Rotate your API key every 90 days to minimize risk:

1. Generate a new API key
2. Update your application to use the new key
3. Test thoroughly
4. Deactivate the old key

Rate Limiting & Throttling

The CurvePioneer API has rate limits to protect against abuse:

If you hit the rate limit, you'll get a 429 response. Wait 60 seconds before retrying.