Authentication

Every API request needs a valid API key. There’s no OAuth or login flow — just a simple key you include in each request.

Creating an API Key

Go to your API settings

Create a new key

Click Create new key and give it a name you’ll recognize later (e.g., Production Dashboard, Reporting Bot).

Copy the key right away

The full API key is shown only once when you first create it. Copy it immediately and save it somewhere secure (like an environment variable or a secrets manager).

If you lose the key, you can’t get it back. You’ll need to delete it and create a new one.

Using Your API Key

Add your key to the Authorization header using the Bearer format:

cURL
JavaScript
Python

curl -X GET https://api.snowseo.com/v3/website-audit?url=example.com \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

const response = await fetch('https://api.snowseo.com/v3/website-audit?url=example.com', {
  headers: {
    'Authorization': `Bearer ${process.env.SNOWSEO_API_KEY}`,
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);

import httpx
import os

client = httpx.Client(
    base_url="https://api.snowseo.com/v3",
    headers={"Authorization": f"Bearer {os.environ['SNOWSEO_API_KEY']}"},
)

response = client.get("/website-audit", params={"url": "example.com"})
print(response.json())

Keeping Your Keys Safe

Never put keys in frontend code

API keys should only be used on the server side. If you put them in browser JavaScript, anyone can see them in your network requests. Instead, make API calls from your backend or a serverless function.

Use environment variables

Store your key in an environment variable instead of hardcoding it. Never commit secrets to version control.

# .env (don't commit this file)
SNOWSEO_API_KEY=sk_live_xxxxxxxxxxxxxxxxxxxx

Rotate keys regularly

It’s good practice to replace your API keys every 90 days. Create a new key first, update your environment, then delete the old one — zero downtime.

Delete compromised keys immediately

If a key was accidentally exposed (e.g., pushed to a public repo), go to Settings → Integrations → API and delete it right away. The key stops working within seconds.

Quick Test

Check that your key works by calling any endpoint:

curl https://api.snowseo.com/v3/website-ratings?url=example.com \
  -H "Authorization: Bearer YOUR_API_KEY"

If you get a 401 Unauthorized response, your key is either invalid, expired, or has been deleted.

Overview

Website Analysis

Keywords & Research

Rank Tracking

Topic Clusters

Content Generation

Creating an API Key

Using Your API Key

Keeping Your Keys Safe

Quick Test

Overview

Website Analysis

Keywords & Research

Rank Tracking

Topic Clusters

Content Generation

​Creating an API Key

​Using Your API Key

​Keeping Your Keys Safe

​Quick Test

Creating an API Key

Using Your API Key

Keeping Your Keys Safe

Quick Test