Authorization header. All endpoints under /api/public/trident/ require this header unless otherwise noted.
Find your API Keys
1
Open the Trident Dashboard
Navigate to app.usetrident.dev and sign in.
2
Go to Project Settings
Click your project name in the top navigation, then select Project Settings.
3
Open the API Keys tab
Select API Keys. You will see your Public Key (safe to share with internal services) and your Secret Key (treat this like a password).
Construct the Authorization header
Combine your keys with a colon separator —publicKey:secretKey — then Base64-encode the result. Set the encoded string as the value of the Authorization: Basic header on every request.
Base URL: https://app.usetrident.dev
Store keys as environment variables
Never hard-code your keys in source files. Use environment variables and load them at runtime:Common authentication errors
Rate limits
The Trident API enforces per-project rate limits on thepublic-api resource. When you exceed the limit, the API returns 429 Too Many Requests. Implement exponential back-off in your clients and respect the Retry-After header when present.
The unauthenticated public demo scan endpoint (POST /api/public/scan) has a separate rate limit of 10 requests per minute per source IP.