Additional Request Headers

📘

Headers sent to API consumers

See Response Headers for a list of headers sent from the Rapid Runtime to consumers.

Headers sent to your API

As an API provider, you will receive some additional headers sent from the Rapid Runtime to your API:

X-RapidAPI-Proxy-Secret
This is a secret unique key for every API that is appended by the Rapid Runtime on every request. For high security, you can validate this secret server-side and check if it equals the key shown in the Provider Dashboard under the Security tab of your API definition).

X-RapidAPI-User
The username of the user that's making the request.

X-RapidAPI-Subscription
The name of the subscription (if any). The values can be:

• BASIC
• PRO
• ULTRA
• MEGA
• CUSTOM (if the user is subscribed to a custom plan.)

X-RapidAPI-Version
The version of the Rapid Runtime.

X-Forwarded-For
The IP address of the client making the request. It could be shown in a comma-separated format like "184.73.132.126, 23.23.103.207" where the first IP address belongs to the client and any subsequent IP represents a proxy.

X-Forwarded-Host
The URL called by the client. For example, my-api-name.p.rapidapi.com.

x-rapidapi-host
The value of the X-RapidAPI-Host header in the client's request. For example, my-api-name.my-tenant-name.rapidapi.com.