API keys

Create a key for each project that calls this API. Send it as the X-API-Key header. The secret is shown once, when the key is created.