Authentication

Solvof uses public API keys for client-side tracking and secret keys for server-side operations. Public keys can be used in browsers and mobile apps. Secret keys should only live on trusted servers.

Keep secret keys private
Never ship a secret key in frontend code, mobile bundles, or public repositories. Use it only from backend services that you control.

Key Types

  • Public API keys identify a project and are safe for SDK initialization.
  • Secret keys authorize privileged APIs such as imports, profile operations, and data reads.
  • Rotate keys when access changes or a key may have been exposed.

Header Example

POST/public/users/profile

Headers

Content-Type
application/json
x-api-key
SOLVOF_SECRET_KEY

Request Example

{
  "distinct_id": "user_123",
  "operations": {
    "$set": {
      "plan": "pro"
    }
  }
}

Response Example

{
  "success": true,
  "distinct_id": "user_123"
}