Authentication

Every request to the Quote Gallery API must include a valid API key. Authentication is done with a single X-API-Key header — no OAuth flows, no token exchange.

Getting your API key

1. Sign in to your Quote Gallery account
2. Go to Dashboard → API Keys
3. Click Generate New Key
4. Copy the key somewhere safe

Making authenticated requests

Pass the key in the X-API-Key header on every request.

curl -H "X-API-Key: your_api_key_here" \
  https://quotegallery.nl/api/v1/quotes

const response = await fetch('https://quotegallery.nl/api/v1/quotes', {
  headers: {
    'X-API-Key': process.env.QUOTE_GALLERY_API_KEY,
  },
})

const data = await response.json()

import requests, os

response = requests.get(
    'https://quotegallery.nl/api/v1/quotes',
    headers={'X-API-Key': os.environ['QUOTE_GALLERY_API_KEY']}
)

data = response.json()

Security

Keep your API key out of client-side code. Store it as an environment variable and only use it in server-side requests. If you need to show quotes on a public page without exposing the key, use the Iframe Embed instead — the key stays on the server.

Rotate your keys periodically. You can generate a new key and revoke the old one from the dashboard at any time.

Tiers and rate limits

Your API key is tied to a subscription tier, which sets your hourly request limit.

Authentication errors

{
  "error": "Invalid API key",
  "status": 401
}

For more on rate limits and how to handle them, see Rate Limits & Pricing.