Authentication

All requests to the Aniva Partner API must include your partner API key in the x-api-key request header.

x-api-key: your-api-key-here

Contact Aniva to obtain your API key. Keys are issued per partner account.

Sending authenticated requests

Include the x-api-key header in every request you make to the API.

curl https://anivahealth.com/api/v1/locations \
  -H "x-api-key: YOUR_API_KEY"

const response = await fetch('https://anivahealth.com/api/v1/locations', {
  headers: {
    'x-api-key': 'YOUR_API_KEY',
  },
});

const data = await response.json();

Error responses

If your API key is missing or invalid, the API responds with 403 Forbidden.

{
  "error": "Forbidden"
}

If you receive this error, verify that:

Your request includes the x-api-key header.
The API key value is correct and has not been rotated.

Never expose your API key in client-side code or public repositories. Treat it like a password.

Contact Aniva to rotate a compromised key or to request changes to your API key permissions.

Introduction

Quick Start

Get Started

Core Concepts

Guides

Authentication

Sending authenticated requests

Error responses

​Sending authenticated requests

​Error responses

Sending authenticated requests

Error responses