The API uses a bearer token in the Authorization header. Keys are generated from Settings → API keys; each key is scoped to a single workspace and inherits that workspace’s permissions.
Example
curl https://api.idleakcheck.com/v1/search -H "Authorization: Bearer idl_live_••••••••" -H "Content-Type: application/json" -d '{"first":"Linda","last":"Chen","email":"linda.chen@gmail.com"}'
TIPKeys with the prefix idl_test_ run against the sandbox (no real source queries, no quota burn, no billing). idl_live_ keys hit production. Use test keys in CI.