Skip to main content

​
Overview

VerbalisAI API uses API key authentication for secure access to all endpoints.

​
Authentication Methods

API Key Authentication

Secure authentication for all API requests

Google OAuth

Social login integration for user authentication

​
API Key Authentication

API keys are perfect for server-to-server communication where you need to authenticate as your application rather than a specific user.

​
Getting Your API Key

1

Access Dashboard

Log in to your VerbalisAI Dashboard
2

Navigate to API Keys

Go to Settings → API Keys
3

Create New Key

Click “Create API Key” and provide a descriptive name
4

Copy and Store

Copy the generated key and store it securely

​
Using API Keys

Include your API key in the Authorization header: 
curl -X GET https://api.verbalisai.com/v1/transcript/user \
  -H "Authorization: Bearer your_api_key_here"
Never expose API keys in client-side code. Always use environment variables or secure configuration management.

​
Google OAuth

VerbalisAI supports Google OAuth for social login integration.

​
OAuth Flow

1

Initiate OAuth

Redirect users to the Google OAuth endpoint
2

User Authorization

User grants permission through Google’s interface
3

Callback Handling

Handle the callback to complete authentication
4

Token Exchange

Exchange the authorization code for access tokens

​
Implementation

// Redirect to Google OAuth
window.location.href = 'https://api.verbalisai.com/api/auth/google';

// Handle callback (this will be handled by your callback URL)
// The API will redirect to your configured callback URL with tokens

​
Error Handling

Common authentication errors and how to handle them: 
{
  "success": false,
  "error": "Unauthorized",
  "message": "Invalid or missing API key"
}
Solution: Check that your API key is valid and properly formatted.
{
  "success": false,
  "error": "Forbidden",
  "message": "Insufficient permissions"
}
Solution: Ensure your API key has the necessary permissions.
{
  "success": false,
  "error": "Too Many Requests",
  "message": "Rate limit exceeded"
}
Solution: Implement exponential backoff and respect rate limits.

​
Best Practices

Security

  • Store API keys securely
  • Use HTTPS for all requests
  • Never expose credentials in client-side code

Error Handling

  • Always check response status codes
  • Implement retry logic for transient errors
  • Handle authentication failures gracefully
  • Log authentication errors for debugging

Performance

  • Implement connection pooling
  • Use appropriate timeout values
  • Monitor authentication success rates
⌘I