Authentication

All API requests require a Bearer token in the Authorization header:

Authorization: Bearer lb_live_YOUR_API_KEY

Error Responses

401 Unauthorized

Missing or invalid API key:

{
  "error_code": "UNAUTHORIZED",
  "message": "Missing or invalid API key"
}

Causes: no Authorization header, malformed header, key not found.

403 Forbidden

Key is revoked or tenant is suspended:

{
  "error_code": "FORBIDDEN",
  "message": "API key is inactive"
}

Causes: key manually deactivated, account suspended.

Required Headers

Header	Required	Description
`Authorization: Bearer <key>`	Always	API key
`Content-Type`	Varies	`application/json`, `application/pdf`, `text/plain`
`Idempotency-Key`	Create/convert endpoints	Prevents duplicate operations

Standard Response Format

Successful responses return the resource JSON directly.

Errors always return this structure:

{
  "error_code": "ERROR_CODE",
  "message": "Human-readable description"
}

---

## Next Steps

- [Conversions](/docs/conversions) — Sync conversion endpoints
- [Jobs API](/docs/jobs) — Async job workflow
- [Best Practices](/docs/best-practices) — Error handling and rate limits