Authentication

This page describes the authentication requirements for the Safety Intelligence API (SIA).

SIA is currently in internal beta. Access is restricted to approved partners and internal teams.

API Key Authentication

All SIA endpoints (except /health) require authentication via API key. Include your key in the Authorization header:

curl "https://api.███████████████/v1/cities" \
  -H "Authorization: Bearer YOUR_API_KEY"

Request Header

Header	Value	Required
`Authorization`	`Bearer YOUR_API_KEY`	Yes
`Content-Type`	`application/json`	Yes (for POST requests)

Example with Full Headers

curl -X POST "https://api.███████████████/v1/predict" \
  -H "Authorization: Bearer sia_live_k8x9mN2pQ4rS7tU1vW3yZ" \
  -H "Content-Type: application/json" \
  -d '{
    "latitude": -26.2041,
    "longitude": 28.0473
  }'

Access Tiers

Tier	Rate Limit	Description
Sandbox	100 req/day	Development and testing
Partner	10,000 req/day	Approved integration partners
Enterprise	Custom	Production deployments with SLA

Sandbox Keys

Sandbox keys are available for approved partners to test integrations:

Prefixed with sia_sandbox_
Limited to 100 requests per day
Expire after 30 days
Responses include "sandbox_mode": true flag

{
  "status": "success",
  "sandbox_mode": true,
  "city": {
    "code": "city_za_jhb",
    "name": "Johannesburg"
  }
}

Production Keys

Production keys are issued to approved partners with active agreements:

Prefixed with sia_live_
Higher rate limits based on agreement
No expiration (revocable)
Full response data without sandbox flags

Error Responses

Missing API Key

{
  "status": "error",
  "code": "UNAUTHORIZED",
  "message": "API key is required",
  "details": {
    "suggestion": "Include Authorization header with Bearer token"
  }
}

Invalid API Key

{
  "status": "error",
  "code": "UNAUTHORIZED",
  "message": "Invalid API key",
  "details": {
    "key_prefix": "sia_sandbox_abc...",
    "suggestion": "Check your API key is correct and not expired"
  }
}

Rate Limited

{
  "status": "error",
  "code": "RATE_LIMITED",
  "message": "Rate limit exceeded",
  "details": {
    "limit": 100,
    "used": 100,
    "reset_at": "2026-02-16T00:00:00Z"
  }
}

Security Best Practices

Store API keys in environment variables, not in code
Use sandbox keys for development and testing
Rotate production keys periodically
Monitor usage for unexpected patterns
Never expose keys in client-side code

Requesting Access

SIA is in internal beta. Access is currently limited to:

Community Wolf internal teams
Approved research partners
Strategic integration partners

Interested in partnership or early access? Email us at hello@communitywolf.com