Authentication

Every rental request must include an active API key.

Request header

Send your key in the X-API-Key header. Use a placeholder while testing documentation examples and your real key only in your private server environment.

HTTP
X-API-Key: YOUR_API_KEY

Example server request

PHP
$response = Http::withHeaders([
    'X-API-Key' => env('UNLIMITEDPLUG_API_KEY'),
    'Accept' => 'application/json',
])->post('https://unlimitedplug.com/api/v1/rentals', $payload);

If a key is exposed

Deactivate or delete the exposed key in your Unlimited Plug account immediately, then create a replacement. Never paste a real key into support tickets, screenshots, browser code, or public source control.