Authentication
Every request (except the public track record) authenticates with two headers: X-USER-EMAIL, the email on your account, and X-USER-TOKEN, an API key that account issued.
The pair must match — a token presented against someone else's email is refused.
Create and revoke keys under the developer console. A key is shown once, at creation; store it in a secret manager, not in code. Keys can be issued with an expiry — an expired key stops authenticating — and each key records when it was last used, so a leaked key is visible and individually revocable.
Authorization: Bearer <token> is also
accepted, without the email header, if your HTTP client prefers standard bearer
auth.
API access is part of the Vega plan — every endpoint below except the public track record requires it, and each carries its badge.
curl "https://optionomics.ai/api/v1/stocks/SPY/metrics" \
-H "X-USER-EMAIL: [email protected]" \
-H "X-USER-TOKEN: $OPTIONOMICS_API_KEY"