api-auth-creditslisted

# LeadMagic — API auth, credits & plans ## Rules 1. Never echo or log `LEADMAGIC_API_KEY`. Read from env only; rotate immediately if a key was pasted into chat or committed. 2. REST auth header is **`X-API-Key`**, not `Authorization: Bearer`. 3. Prefer hosted MCP (`https://mcp.leadmagic.io/mcp`) for agent workflows — OAuth, no key in shell history. 4. Preflight every run: `GET /v1/credits` (free). Preview anything ≥ 500 credits: `POST /v1/batch/preview-cost` (free). ## Base URL & key - **Base:** `https://api.leadmagic.io` - **Key:** [app.leadmagic.io](https://app.leadmagic.io?utm_source=github&utm_medium=skill&utm_campaign=leadmagic-skills) → Settings → API ```bash curl -sS "https://api.leadmagic.io/v1/credits" -H "X-API-Key: $LEADMAGIC_API_KEY" ``` ## Plans (what a run can afford) Basic $49.99/mo · 2,000 credits (no rollover, 1 seat) → Essential $99 · 5,000 → Growth $249 · 20,000 → Professional $499 · 50,000 → Ultimate $849 · 100,000 (rollover on Essential+). Annual = 12× credits up front at ~2 months free. **Professional/Ultimate include credit-free Search API throughput (5/10 req/s)** — v3 searches cost 0 credits there and 1 credit/row elsewhere. Full ladder + budgeting: `leadmagic` skill → `references/plans-and-limits.md`. ## Status codes | Code | Meaning | What to do | |---|---|---| | 400 | Validation | Error body names the field and the fix (`detail`, `action`) | | 401 | Missing/invalid key | Check header name (`X-API-Key`) and env var; key may be revoked | | 4