API Authentication - How to Authenticate Requests - OddsPapi API

All HTTP endpoints require an API key. You will only receive:

what you are requesting, filtered by
what you have access for

How to authenticate

Pass your key either as the X-API-Key header or as the apiKey query parameter. Both are accepted on every endpoint — pick one. Prefer the header: query strings land in proxy, CDN and browser history logs. The query parameter stays supported indefinitely.

Header (recommended)
Query parameter

curl -H 'X-API-Key: YOUR_KEY' 'https://v5.oddspapi.io/en/bookmakers'

curl 'https://v5.oddspapi.io/en/bookmakers?apiKey=YOUR_KEY'

Send one, not both. If the header and the query parameter are both present and carry different values, the request is rejected with 401 invalid_api_key — whichever of the two is valid. Sending the same key in both places is harmless.

Errors

Status	`code`	Cause
`401`	`missing_api_key`	neither the header nor the query parameter was sent
`401`	`invalid_api_key`	the key is unknown, expired or disabled
`403`	`channel_not_allowed`	valid key, but it is not entitled to that endpoint

{ "error": 401, "message": "missing apiKey", "code": "missing_api_key" }