Guides

Authentication

The Parcl Labs API uses API keys passed in the Authorization header. There is no OAuth flow, no signed request, and no expiry — the key in the header is the key.

The header

Every request must include your API key in the Authorization header:

Authorization: YOUR_API_KEY

Note that the value is the raw key — not Bearer YOUR_API_KEY. The OpenAPI spec models this as an apiKey security scheme of type header with name Authorization.

Getting a key

Access your API key from the API-Resources page. Each key is tied to a single user account and inherits that account's plan, rate limits, and endpoint access.

Treat your key like a password. Anyone with the key can spend your credits. Store it in a secrets manager or environment variable — never commit it to source control.

Examples

curl

curl 'https://api.parcllabs.com/v1/search/markets?query=Austin' \
  -H 'Authorization: YOUR_API_KEY'

Python (requests)

import os
import requests

response = requests.get(
    "https://api.parcllabs.com/v1/search/markets",
    params={"query": "Austin"},
    headers={"Authorization": os.environ["PARCL_LABS_API_KEY"]},
)
response.raise_for_status()
print(response.json())

JavaScript (fetch)

const res = await fetch(
  "https://api.parcllabs.com/v1/search/markets?query=Austin",
  { headers: { Authorization: process.env.PARCL_LABS_API_KEY } },
);
const data = await res.json();
console.log(data);

Error responses

Status When you'll see it
401 Unauthorized Missing or unrecognised Authorization header.
403 Forbidden Key is valid but your plan does not include the endpoint you called.
429 Too Many Requests You have exceeded your plan's rate limit or burned through your credits.

Next steps