API Authentication

The ElevenLabs API uses API keys for authentication. Every request to the API must include your API key, used to authenticate your requests and track usage quota.

Each API key can be configured with the following restrictions:

1. Scope restriction: Set access restrictions by limiting which API endpoints the key can access.
2. Credit quota: Define custom credit limits to control usage.
3. IP allowlisting: Restrict the key to specific IP addresses or CIDR ranges. Requests from non-allowlisted IPs are rejected with a 403 error. Learn more.

Remember that your API key is a secret. Do not share it with others or expose it in any client-side code (browsers, apps).

All API requests should include your API key in an xi-api-key HTTP header as follows:

xi-api-key: ELEVENLABS_API_KEY

You can paste the command below into your terminal to run your first API request. Make sure to replace $ELEVENLABS_API_KEY with your secret API key.

curl 'https://api.elevenlabs.io/v1/models' \
  -H 'Content-Type: application/json' \
  -H 'xi-api-key: $ELEVENLABS_API_KEY'

Example with the elevenlabs Python package:

from elevenlabs.client import ElevenLabs

elevenlabs = ElevenLabs(
  api_key='YOUR_API_KEY',
)

Example with the elevenlabs Node.js package:

import { ElevenLabsClient } from "@elevenlabs/elevenlabs-js";

const elevenlabs = new ElevenLabsClient({
  apiKey: "YOUR_API_KEY",
});

For certain endpoints, you can use single use tokens to authenticate your requests. These tokens are valid for a limited time and can be used to connect to the API without exposing your API key, for example from the client side.

See the Single use tokens documentation for more information.