Supalink uses email-based authentication. There are no passwords — you verify your email with a one-time code and receive an API key.The API key is used for all authenticated requests via the Authorization header:
{ "message": "Verified! Here is your API key.", "apiKey": "sl_live_1981ecdf8dbb8c20c7da2b068ccbc12a", "email": "you@example.com", "plan": "free", "isNewUser": false, "warning": "IMPORTANT: Save this API key now. It is shown only once and cannot be retrieved later."}
The API key is displayed only once. Save it immediately. If you lose it, you’ll need to verify your email again to generate a new one (the old key is invalidated).