API Key

Every Chaos request is authenticated with an API key sent in the Authorization header.

Get a key

  1. Sign in to the ProjectDiscovery Cloud Platform.
  2. Open your account settings and locate the API key section.
  3. Copy the key — it is a UUID-style string tied to your account.

Treat the key as a secret: never commit it or expose it in browser code.

Using the key

Pass the key verbatim in the Authorization header — no Bearer prefix.

curl -X GET "https://dns.projectdiscovery.io/dns/lovable.app/subdomains" \
     -H "Authorization: API_KEY" \
     -H "Connection: close"

This monitor

This deployment stores its Chaos key as a backend secret. All Chaos requests run server-side on an hourly schedule, so the key is never sent to the browser and never appears in the network tab.