# Authentication (/docs/authentication)



Use an API key to make requests from your server. [Create a key in the dashboard](/dashboard/api-keys).

## TypeScript [#typescript]

Set `EVENTLAYER_KEY` in your server environment:

```bash
EVENTLAYER_KEY=sk_your_key_here
```

The SDK reads it automatically:

```ts
import { Eventlayer } from "eventlayer";

const eventlayer = new Eventlayer();
```

You can also pass your key directly: `new Eventlayer("sk_your_key_here")`.
Keep keys out of browser and mobile application code.

## HTTP [#http]

Send your key in the `Authorization` header:

```bash
curl https://api.eventlayer.dev/v1/event \
  -H "Authorization: Bearer $EVENTLAYER_KEY"
```

## Incoming webhooks [#incoming-webhooks]

Use your endpoint’s signing secret to [verify webhooks](/docs/guides/webhooks).
A signing secret verifies incoming events; it does not authenticate API requests.

[Issue your first ticket](/docs/quickstart) or [manage your API keys](/docs/api-keys).