Authentication

Pass your API key either as a Bearer token or via X-Api-Key:

Authorization: Bearer hga_live_…
# or
X-Api-Key: hga_live_…

Scopes

Each key is granted explicit scopes. A request to an endpoint outside its scopes returns 403 scope_missing.

• read:programs
• read:courses
• read:certificates
• read:jobs
• read:universities
• write:applications

Errors

• 401 missing_api_key
• 401 invalid_api_key
• 401 key_inactive / key_expired
• 403 scope_missing