Skip to main content
Every /v1/* endpoint (logos, search, brand info, name lookup) runs through the same access gate. A request is allowed when either condition is true:
  1. It comes from a trusted origin (an Ora web surface, set via Origin or Referer).
  2. It carries a valid API key (la_*) in an Authorization: Bearer or X-API-Key header.
Use case by use case:

API key format

API keys start with la_ (e.g., la_abc123…). Generate and manage keys from the dashboard at app.logoo.useora.co. Keys are issued through Better Auth and are scoped to the user who created them — use them for billing, usage tracking, and quota enforcement.

Sending your key

Either header works; pick whichever is easier in your client.

Rate limits & usage

Every /v1/* request is rate-limited and counted against your plan quota. When a key is present, counts accrue to that key’s owner; otherwise, they accrue per IP. Exceeding the limit returns 429 RATE_LIMITED.

Error responses

Error body shape: