Authentication

Session authentication

Signed-in requests are authorized by the secure session cookie PreciseEV sets when you sign in. Browser requests from the same site send it automatically.

A signed-out request to a protected route returns 401 with code: "SIGN_IN_REQUIRED".

API keys (coming soon)

Personal API keys will let your own servers call the API without a browser session. Keys will be sent in the X-Api-Key header and can be rotated from your account page.

curl https://www.preciseev.com/api/sports/catalog?sport=nba \
  --header 'X-Api-Key: YOUR_API_KEY'

Access by plan

A signed-in account without the right plan gets 403 with code: "UPGRADE_REQUIRED".