Anyimagedetector Authentication

generated: '2026-08-11'
method: searched
source: https://imagedetector.online/docs
docs: https://imagedetector.online/docs
description: >-
  AnyImageDetector uses a single static API key, presented either as an HTTP Bearer token or in
  an x-api-key header. There is no OAuth, no OpenID Connect, no mTLS, no scopes, no refresh and
  no token exchange — the key is the whole authorization model, and entitlement is enforced by
  plan and credit balance rather than by scope.
summary:
  types: [http-bearer, apiKey]
  api_key_in: [header]
  oauth2_flows: []
  scopes: false
  mtls: false
  openid_connect: false
schemes:
  - name: BearerAuth
    type: http
    scheme: bearer
    in: header
    parameter_name: Authorization
    value_format: 'Bearer sk_your_api_key'
    key_prefix: sk_
    description: >-
      Pass the API key as a Bearer token in the Authorization header. Documented as the primary
      method.
    sources: [https://imagedetector.online/docs]
  - name: ApiKeyHeader
    type: apiKey
    in: header
    parameter_name: x-api-key
    value_format: 'sk_your_api_key'
    key_prefix: sk_
    description: >-
      Alternative to the Authorization header. The docs state to provide ONE of the two, not
      both.
    sources: [https://imagedetector.online/docs]
key_management:
  issued_at: Settings -> API Keys (signed-in account UI)
  self_service: true
  eligibility: >-
    A paid plan is required. The docs state plainly that free accounts and unauthenticated
    guests cannot create API keys or call /v1 endpoints.
  shown_once: true
  rotation_policy: not published
  expiration: not published
  revocation: not published
failure_modes:
  - status: 401
    error: unauthorized
    condition: Missing or invalid API key.
    observed_body: '{"error":"unauthorized","message":"Missing API key"}'
  - status: 403
    error: paid_plan_required
    condition: Valid key on an account without a paid plan.
  - status: 402
    error: insufficient_credits
    condition: Authenticated but out of credits.
transport:
  https_only: true
  note: The docs state all endpoints are served over HTTPS and versioned with a /v1 prefix.
x-evidence:
  probed: '2026-08-11'
  url: https://imagedetector.online/v1/image/detect
  http_status: 401
  content_type: application/json
  note: >-
    Anonymous POST returned the documented 401 unauthorized envelope, confirming the key is
    required and enforced at the edge.