Snooker API authentication

Sending the key, and what happens without one.

Every call needs a key, sent in a header in one of two ways:

Authorization: Bearer snk_live_...\nX-API-Key: snk_live_...

A key in the address (?key=) is refused with 400 bad_request: addresses end up in logs and browser history, headers do not.

Without a key, or with one that is not valid, the answer is 401 unauthorized. Keys are made and replaced in your account; a replaced key keeps working for 24 hours so nothing breaks while you change it over.

The key you paste into these pages is kept in your browser only, as snookerapi.net.api_key, and filled into every page's Try it.