API Key
Every Chaos request is authenticated with an API key sent in the Authorization header.
Get a key
- Sign in to the ProjectDiscovery Cloud Platform.
- Open your account settings and locate the API key section.
- Copy the key — it is a UUID-style string tied to your account.
Treat the key as a secret: never commit it or expose it in browser code.
Using the key
Pass the key verbatim in the Authorization header — no Bearer prefix.
curl -X GET "https://dns.projectdiscovery.io/dns/lovable.app/subdomains" \
-H "Authorization: API_KEY" \
-H "Connection: close"This monitor
This deployment stores its Chaos key as a backend secret. All Chaos requests run server-side on an hourly schedule, so the key is never sent to the browser and never appears in the network tab.