Create an API key in the dashboard, keep it secret, and send it with every API request.
gto_… API key as Authorization: Bearer $POKERAI_API_KEY. X-API-Key is an equivalent alternative; use one header, not both.| Fact | Value |
|---|---|
| Where to create a key | Dashboard; the key is shown once, so store it in a secret manager. |
| Header | Authorization: Bearer $POKERAI_API_KEY |
| Alternative | X-API-Key: $POKERAI_API_KEY (equivalent; send one form only). |
| Applies to | GTO and PokerKit endpoints share the same key. |
| Free quota | 1,000 presolved lookups + 25 real-time solves per month. |
curl -s https://pokerai.bet/v1/gto/preflop \
-H "Authorization: Bearer $POKERAI_API_KEY" \
-H "Content-Type: application/json" \
-d '{"hole_cards":"AhKh","positions":{"hero":"UTG"},"preflop_actions":[{"position":"SB","action":"small blind","amount":0.5},{"position":"BB","action":"big blind","amount":1}]}'| HTTP | Error | What to do |
|---|---|---|
| 401 | missing_api_key | Add one supported API-key header. |
| 401 | invalid_api_key | Check the copied key and its environment variable; create a replacement if needed. |
| 502 | auth_unavailable | Retry with exponential backoff; do not expose the key in logs. |
Real-time assistance at real-money tables is prohibited.