> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gomobile.ma/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> How to authenticate your API requests with Gomobile

Gomobile uses **API key authentication**. Every API request requires a valid API key in the request header.

## Getting your API key

API keys are provisioned by the Gomobile team.

<Info>
  **Need API access?** [Request your API key](https://docs.google.com/forms/d/1F6_7OIDNq8_lWgKPyP-DudF3dvBTl31X4dqVf5St2zE) and our team will set you up within 24 hours.
</Info>

Once you receive your API key, store it securely and use it for all API requests.

## How to authenticate

Include your API key in the `x-api-key` header of every request:

```bash theme={null}
x-api-key: YOUR_API_KEY
```

## Making authenticated requests

Use this endpoint to verify your API key:

```bash theme={null}
curl -X GET https://api.gomobile.ma/api/users/me \
  -H "x-api-key: YOUR_API_KEY"
```

## Using environment variables

Store your API key as an environment variable to keep it secure:

```bash theme={null}
export GOMOBILE_API_KEY="your-api-key"

curl -X GET https://api.gomobile.ma/api/users/me \
  -H "x-api-key: $GOMOBILE_API_KEY"
```

## Security best practices

* **Never commit API keys to version control**
* **Use environment variables** or a secrets manager
* **Keep your API key private** — don't share it in public forums, emails, or chat
* **Contact support** immediately if your key is compromised

<Card title="Making Your First Call" icon="phone" href="/getting-started/making-your-first-call">
  A complete walkthrough of creating contacts, audiences, flows, and launching your first campaign.
</Card>