Authentication

API Keys

All API requests require a Bearer token in the Authorization header.

Authorization: Bearer wrb_live_xxxxxxxxxxxxx

All API keys start with the wrb_live_ prefix.

Never commit API keys to source control. Use environment variables instead.

Rate limits are per plan and apply to messages per minute.

Rate limit headers are included in every response:

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
X-RateLimit-Reset: 1735689600

When you hit the limit, the API returns 429 Too Many Requests.