## Authorization

Authenticating with the FullContact API is accomplished through the use of an API key.

You can generate and manage your API keys from the [Fullcontact Platform UI](https://platform.fullcontact.com/developers/api-keys).

When accessing the FullContact API, include your API Key within the "Authorization" header of your POST,

using a prefix of "Bearer". An example of this is shown below.

### Passing the Auth Token

```curl
curl -X POST https://api.fullcontact.com/v3/person.enrich \
 -H 'Authorization: Bearer {Your API Key}' \
 -H 'Content-Type: application/json' \
 -d '{"email": "chipshipperman@gmail.com"}'
```

### Keep Your API Keys Secret

Your API keys are essentially like passwords to access the FullContact API, and should be kept secret. Do not embed them in client-side code or post them in publicly accessible areas such as support forums or GitHub.

It is a common and easy mistake to accidentally copy and paste code snippets, including your API key, when seeking help - be sure to remove your API key and any other sensitive information before posting.