Authentication

The Juno Developer API uses an API key for authentication. Every request must include your API key in the X-API-Key request header.

Headers

Header	Description
X-API-Key	Your private API key used to authenticate requests.

Example

curl -X GET "https://api.usejuno.io/v1/developer/rankings" \
  -H "X-API-Key: your_api_key_here"

Obtaining Credentials

API credentials are generated directly from your Juno dashboard. Partner admins can create, list, and revoke API keys for their partner account.

1. Log in to your Juno account.
2. Navigate to Settings.
3. Click on the Developer tab.
4. Click Generate New API Key.
5. Copy the key immediately and store it securely.

The full API key is only shown once when it is created. Juno stores a secure hash of the key and cannot display the original value later. If a key is lost, revoke it and generate a new one.

Caution: Your API key carries the same privileges as your developer integration. Keep it secret. Do not expose it in client-side code or public repositories.

Rate Limits

Developer API requests are limited to 300 requests per minute per API key. If the limit is exceeded, the API returns 429 Too Many Requests.

Some expensive endpoints have an additional route-specific limit. For example, POST /jobs/{jobId}/applications is limited to 20 requests per minute per API key per job because it accepts and processes resume files.

Rate limits are applied per API key. If you rotate a key, the new key receives its own rate-limit window.

Security Best Practices

• Store credentials in environment variables or a secrets manager.
• Use server-to-server calls. Do not expose credentials in client-side code.
• Rotate keys immediately if a compromise is suspected.

Error Responses

Status	Meaning
401	Missing or invalid credentials
413	Request body or file is too large
429	Rate limit exceeded

{
  "message": "Invalid or inactive API key"
}