Security

Access to the HANK AutoCoder API is secured by three layers working together:

• Firewall — network-level protection in front of the service.
• SSL — every request is made over an encrypted TLS connection.
• API key — a per-customer API keyA secret token that authenticates your application to a HANK API. Send it as a bearer token on each request; treat it like a password and never commit it to source control. is provided to each customer per API. The key enables multi-tenancy per request, isolating your data from every other customer on each call.

The key is sent in the x-api-key request header:

x-api-key: <your-api-key>

Your API key value is provisioned per customer — contact your Hank.ai representative to obtain one. Treat it like a password: keep it server-side and never commit it to source control.