Authentication

All API requests require authentication via an API key passed in the X-API-Key header.

Creating an API key

1. Go to Dashboard > API Keys
2. Click Create Key
3. Copy the key immediately - it is only shown once

The key has a tp_ prefix. Only the prefix is stored for identification.

Using your key

Include the key in every request:

curl -H "X-API-Key: tp_your_key_here" \
  https://turbopentest.com/api/pentests

Error responses

All errors return JSON:

{
  "error": "Description of the error"
}

Rate limits

The API is rate-limited to protect service quality. If you receive a 429 response, wait before retrying. Contact support if you need higher limits.