Every
/v1/* endpoint (logos, search, brand info, name lookup) runs through the same access gate. A request is allowed when either condition is true:- It comes from a trusted origin (an Ora web surface, set via
OriginorReferer). - It carries a valid API key (
la_*) in anAuthorization: BearerorX-API-Keyheader.
API key format
API keys start withla_ (e.g., la_abc123…). Generate and manage keys from the dashboard at app.logoo.useora.co. Keys are issued through Better Auth and are scoped to the user who created them — use them for billing, usage tracking, and quota enforcement.
Sending your key
Either header works; pick whichever is easier in your client.Rate limits & usage
Every/v1/* request is rate-limited and counted against your plan quota. When a key is present, counts accrue to that key’s owner; otherwise, they accrue per IP. Exceeding the limit returns 429 RATE_LIMITED.
Error responses
Error body shape: