Authentication - Reverse Looker Documentation

Getting an API key

Create an account

Purchase a paid plan

Any paid plan (subscription or pay-as-you-go) enable Reverse Looker API. Go to app.reverselooker.com/billing

Access settings

Go to Settings → API Keys

Generate a key

Click Create API Key and give it a descriptive name

Usage

Include your API key in the x-api-key header of each request:

curl -X POST https://api.reverselooker.com/reverse-contact/single \
  -H "Content-Type: application/json" \
  -H "x-api-key: rl_live_abc123..." \
  -d '{"email": "john@company.com"}'

const response = await fetch('https://api.reverselooker.com/reverse-contact/single', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.REVERSELOOKER_API_KEY
  },
  body: JSON.stringify({ email: 'john@company.com' })
});

import requests
import os

response = requests.post(
    'https://api.reverselooker.com/reverse-contact/single',
    headers={
        'Content-Type': 'application/json',
        'x-api-key': os.environ['REVERSELOOKER_API_KEY']
    },
    json={'email': 'john@company.com'}
)

req, _ := http.NewRequest("POST", "https://api.reverselooker.com/reverse-contact/single", body)
req.Header.Set("Content-Type", "application/json")
req.Header.Set("x-api-key", os.Getenv("REVERSELOOKER_API_KEY"))

$ch = curl_init('https://api.reverselooker.com/reverse-contact/single');
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Content-Type: application/json',
    'x-api-key: ' . getenv('REVERSELOOKER_API_KEY')
]);

Key types

Type	Prefix	Usage
Live	`rl_live_`	Production
Test	`rl_test_`	Development (does not consume credits)

Test keys return mock data and should not be used in production.

Best practices

Environment variables

Never hardcode your API key in the code. Use environment variables.

One key per environment

Create separate keys for development, staging, and production.

Regular rotation

Rotate your keys periodically and after any security incident.

Minimal permissions

Use keys with only the necessary permissions.

Authentication errors

Code	Message	Cause
401	`Missing API key`	`x-api-key` header is missing
401	`Invalid API key`	API key is invalid or revoked
403	`API key disabled`	Key disabled by administrator

Example 401 response

{
  "error": "Invalid API key",
  "message": "The provided API key is not valid or has been revoked"
}

Revoking a key

If you suspect a key has been compromised:

Log in to app.reverselooker.com
Go to Settings → API Keys
Click Revoke next to the affected key
Generate a new key
Update your applications

Revocation is immediate. All requests using this key will fail instantly.

​Getting an API key

​Usage

​Key types

​Best practices

Environment variables

One key per environment

Regular rotation

Minimal permissions

​Authentication errors

​Revoking a key

Getting an API key

Usage

Key types

Best practices

Authentication errors

Revoking a key