# Your first authenticated request

Availability: Release contract.
Last reviewed: 2026-08-28.

Get your key: [enter your email, verify the eight-digit code, then copy your first key](/docs/signup-verification).

## 1. Make a request

Use your server or local development environment, with the key supplied through a protected environment variable. Never put the secret in a URL, frontend bundle or conversation.

```sh
curl --request GET --max-time 15 \
  --url https://api.marketmonolith.com/v1/me \
  --header "X-Market-Monolith-Key: $MARKET_MONOLITH_API_KEY"
```

## 2. Check the response

Expected response with illustrative identifiers, not an executed request:

```json
{
  "accountRef": "acct_example",
  "applicationRef": "app_example",
  "keyId": "key_example",
  "scopes": ["identity:read"],
  "businessAccess": "not_enabled",
  "billable": false
}
```

Match the account and application references to your console. “Waiting for your first request” changes only when the server records a successful check for the selected credential. Copying a key or opening an example is not verification.

## Next steps

Read [API-key security](/docs/api-keys) and [authentication troubleshooting](/docs/errors-troubleshooting). If key creation completed but the secret was lost, inspect its safe metadata and explicitly replace it. Do not restart signup or expect a refresh to reveal the original key.

This response proves credential authentication only—not workspace permissions, funding, provider readiness or an agent connection.