GETTING STARTED
Authentication
Authentication
BounceCheck supports two authentication methods.
API key (recommended for integrations)
Pass your key in the X-API-Key header. Create and revoke keys on the API Keys dashboard.
X-API-Key: YOUR_API_KEY
JWT access token (dashboard session)
The web app logs in with email/password or Google and uses a short-lived JWT (30 minutes, auto-refreshed). Pass it as a Bearer token:
Authorization: Bearer YOUR_JWT
API key scope
API keys authenticate single verification and disposable check today. Bulk upload, job status, results, and download require a logged-in dashboard (JWT) session. API-key-only integrations should use the single-verify endpoint.