Authentication

Most endpoints are public — pass no header and they just work. Endpoints that touch account state, or that compute against caller-supplied policy, require an X-API-Key header.

curl https://api.dotlookup.dev/v1/carriers/2233855 \
  -H "X-API-Key: your_api_key_here"

Which endpoints require an API key?

Endpoint	Auth required?
`GET /v1/carriers/{dot}`	Optional — but provides higher rate limits when present
`GET /v1/carriers/{dot}/safety`	Optional
`GET /v1/carriers/{dot}/insurance`	Optional
`GET /v1/carriers/{dot}/risk-history`	Optional
`GET /v1/carriers/{dot}/changes`	Optional
`GET /v1/carriers/{dot}?as_of=...`	Optional
`GET /v1/carriers/search`	Optional
`GET /v1/changes/...`	Optional
`GET /v1/meta`, `GET /v1/health`	Not used — these are unauthenticated and unthrottled; an API key is ignored
`POST /v1/carriers/bulk`	Required
`POST /v1/carriers/{dot}/risk-score`	Required
All `/v1/watchlist/...` endpoints	Required (including webhook config)
`GET /v1/auth/me`, `POST /v1/auth/regenerate-key`	Required

Getting an API Key

Sign up from the DotLookup Dashboard or via the API. email and password are both required, and the password must be at least 8 characters:

curl -X POST https://api.dotlookup.dev/v1/auth/signup \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "password": "your-password", "name": "Your Name", "company": "Your Co"}'

The response includes your api_key. Store it securely — it won’t be shown again. Lost it? Hit POST /v1/auth/regenerate-key (authenticated by the previous key) or use the password-reset flow.

Checking Your Account

Use the /v1/auth/me endpoint to view your account details and usage:

curl https://api.dotlookup.dev/v1/auth/me \
  -H "X-API-Key: your_api_key_here"

See the Account endpoint reference for the full response shape.

Rate limits

Anonymous traffic is throttled by IP at a public-good rate. Authenticated requests use your account’s tier-specific limit and count against your usage. See Rate Limits for headers and behavior.

Getting Started

Code Examples

Authentication

Authentication

Which endpoints require an API key?

Getting an API Key

Checking Your Account

Rate limits

​Authentication

​Which endpoints require an API key?

​Getting an API Key

​Checking Your Account

​Rate limits

Authentication

Which endpoints require an API key?

Getting an API Key

Checking Your Account

Rate limits