> ## Documentation Index
> Fetch the complete documentation index at: https://partners.rainbrand.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Authenticate server-side requests with a Rainbrand API key.

Use one approved Rainbrand account to own the integration. Sign in with that
account, then create a dedicated API key in
[Account](https://www.rainbrand.com/account?tab=api-keys).

Brand Skills belong to the account behind the key, so keep the integration on
that account when rotating keys. Rainbrand shows a new key once. Store it on your
server and never expose it in browser code, logs, source control, or agent
prompts. Keys start with `bloom_sk_`, the prefix from Rainbrand's former name.

Store it in your backend's secret manager:

```bash theme={null}
export RAINBRAND_API_KEY=bloom_sk_...
```

## Send the key

Use `x-api-key` unless your HTTP client requires a bearer token:

```http theme={null}
x-api-key: bloom_sk_...
```

```http theme={null}
Authorization: Bearer bloom_sk_...
```

Both headers authenticate the same key. Do not send both.

## Base URL

All Brand Skill endpoints use the production base URL:

```text theme={null}
https://www.rainbrand.com/api/v1
```

If a key may have been exposed, revoke it in
[Account](https://www.rainbrand.com/account?tab=api-keys) and create a replacement
from the same account. See the
[API reference](https://partners.rainbrand.com/api-reference/brand-skills/create-a-brand-skill.md) for the exact
authentication and access errors.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.