Skip to main content
The Enrow API uses API key authentication. Every request must include your API key in the x-api-key header. There are no OAuth flows or bearer tokens to manage — one API key authenticates every endpoint.

​
How do I get my API key?

  1. Sign up at app.enrow.io
  2. Click API in the left menu
  3. Copy your API key
Keep your API key secure and never commit it to version control. Treat it like a password. If a key is ever exposed, rotate it — see Best practices.

​
How do I authenticate a request?

Include your API key in the x-api-key header on every request: 
curl --request POST \
  --url https://api.enrow.io/email/find/single \
  --header 'Content-Type: application/json' \
  --header 'x-api-key: YOUR_API_KEY' \
  --data '{
    "fullname": "John Doe",
    "company_domain": "example.com"
  }'
The same x-api-key header works for every endpoint — Email Finder, Email Verifier, Phone Finder, and Account info.

​
Why am I getting a 401 error?

A 401 Unauthorized response means your API key is missing or invalid. If the API key is invalid, you’ll receive: 
{
  "message": "This apikey is not valid"
}
If no API key is provided, the message is instead "No apikey found in the x-api-key headers". For the complete list of status codes and error formats, see Status codes and Error handling.

​
How do I check my account and credits?

You can retrieve your account information (credits balance and registered webhooks) using the same x-api-key header — no body payload is needed: 
curl https://api.enrow.io/account/info \
  -H "x-api-key: YOUR_API_KEY"
Response
{
  "credits": 8500,
  "webhooks": ["https://your-app.com/webhooks/enrow"]
}
To understand how credits are consumed per endpoint, see Credits & billing.

​
Best practices

Store your API key in environment variables rather than hardcoding it:
export ENROW_API_KEY="your_api_key_here"
For enhanced security, rotate your API keys periodically and revoke unused keys.
Create separate API keys for development, staging, and production environments.

​
Next steps

Find an email

Search for a professional email address from a name and company.

Verify an email

Check whether an email address is valid and deliverable.

Credits & billing

See how credits are consumed for each endpoint.

Rate limits

Understand the API request limits before scaling up.