Authentication
Every request to the Amass API requires an API key.
Getting an API Key
- Sign in at platform.amass.tech
- Go to API Keys
- Click Create API Key
- Copy the key immediately — it starts with
amass_and is shown only once
You can create multiple keys for different applications. Each key can be revoked independently.
Using Your Key
Include the key in the Authorization header on every request:
Shell
curl "https://api.amass.tech/api/v1/cores/biomedcore/records?query=CRISPR" \
-H "Authorization: Bearer amass_YOUR_KEY"In Python:
PYTHON
import requests
headers = {"Authorization": "Bearer amass_YOUR_KEY"}
response = requests.get(
"https://api.amass.tech/api/v1/cores/biomedcore/records",
headers=headers,
params={"query": "CRISPR"},
)In R:
R
library(httr2)
response <- request("https://api.amass.tech/api/v1/cores/biomedcore/records") |>
req_headers(Authorization = "Bearer amass_YOUR_KEY") |>
req_url_query(query = "CRISPR") |>
req_perform()In JavaScript:
JAVASCRIPT
const response = await fetch(
"https://api.amass.tech/api/v1/cores/biomedcore/records?query=CRISPR",
{ headers: { Authorization: "Bearer amass_YOUR_KEY" } },
)Error Responses
| Status | Code | When |
|---|---|---|
| 401 | UNAUTHORIZED | Missing or invalid API key |
| 403 | FORBIDDEN | Valid key but insufficient permissions |
If you receive a 401, check that:
- The
Authorizationheader is present - The format is
Bearer amass_...(note the space afterBearer) - The key has not been revoked
Key Management
- Keys are scoped to your user
- Rate limits are per user, not per key — multiple keys for the same user share the same quota
- Revoke compromised keys immediately from API Keys
Next Steps
- Quickstart — Make your first API call
- Pricing — Understand API pricing and plans
- Overview — Error handling and rate limits