# Authentication

The Forefront API uses API keys for authentication. Visit your [API Keys](https://forefront.ai/app/api-keys) page to retrieve the API key you'll use in your requests.

All API requests should include your API key in an `Authorization` HTTP header as follows:

```
Authorization: Bearer FOREFRONT_API_KEY
```

Alternatively, instantiate your API key with the Python or Node.js package:

{% tabs %}
{% tab title="Python" %}

```python
from Forefront import forefront

client = ForefrontClient(api_key='FOREFRONT_API_KEY')
```

{% endtab %}

{% tab title="Node.js" %}

```typescript
import Forefront from "forefront"

const client = new Forefront("<YOUR API KEY>");
```

{% endtab %}
{% endtabs %}

{% hint style="info" %}
**Remember that your API key is a secret!** Do not share it with others or expose it in any client-side code (browsers or apps). Production requests must be routed through your own backend server where your API key can be securely loaded from an environment variable or key management service.
{% endhint %}