Authentication

How to authenticate

The API uses Bearer token authentication in the Authorization header. Include your API Key in every request:

Authorization: Bearer YOUR_API_KEY

Authenticated request example

curl -X GET \
  "https://qegraxvwwikrltmtfamo.supabase.co/functions/v1/v1-quote-funeral-service?locality_id=24017" \
  -H "Authorization: Bearer YOUR_API_KEY"

const response = await fetch(
  'https://qegraxvwwikrltmtfamo.supabase.co/functions/v1/v1-quote-funeral-service?locality_id=24017',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY',
      'Content-Type': 'application/json'
    }
  }
);
const data = await response.json();

import requests

response = requests.get(
    'https://qegraxvwwikrltmtfamo.supabase.co/functions/v1/v1-quote-funeral-service',
    params={'locality_id': 24017},
    headers={'Authorization': 'Bearer YOUR_API_KEY'}
)
data = response.json()

Authentication errors

Code	Message	Cause
`401`	`UNAUTHORIZED`	API Key missing or invalid
`401`	`KEY_REVOKED`	The API Key has been deactivated
`429`	`RATE_LIMIT_EXCEEDED`	100 requests/hour limit exceeded

401 Response

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or not found API Key."
  }
}

429 Response

{
  "error": {
    "code": "RATE_LIMIT_EXCEEDED",
    "message": "You have exceeded the limit of 100 requests per hour. Please try again in a few minutes."
  }
}

Usage limits (Rate Limiting)

Plan	Limit	Window
Beta	100 requests	Per hour, per API Key

The Retry-After header indicates how many seconds to wait after receiving a 429.

Security

Do not expose your API Key in the frontend. API requests must always be made from your backend or from the MCP/GPT Action server — never from publicly accessible client-side JavaScript.

API Keys are stored as SHA-256 hashes. Funos never stores the key in plain text.
If you believe your API Key has been compromised, contact api@funos.es immediately.
Each API Key has an origin identifier (name, origin) for full traceability in logs.

Request an API Key

The API is in private beta. To request access:

Write to api@funos.es with subject: API Key Request - Funos AI Partner
Briefly describe your use case (GPT Action, MCP, web application…)
You will receive your API Key within 24–48 hours

If you are setting up a GPT Action in ChatGPT, the API Key is entered in GPT Builder → Configure → Actions → Authentication → API Key → Bearer.

Getting started

API Reference

How to authenticate

Authenticated request example

Authentication errors

Usage limits (Rate Limiting)

Security

Request an API Key

​How to authenticate

​Authenticated request example

​Authentication errors

​Usage limits (Rate Limiting)

​Security

​Request an API Key

How to authenticate

Authenticated request example

Authentication errors

Usage limits (Rate Limiting)

Security

Request an API Key