Headers sent to API consumers
See Response Headers for a list of headers sent from the Rapid Runtime to consumers.
As an API provider, you will receive some additional headers sent from the Rapid Runtime to your API:
This is a secret unique key for every API that is appended by the Rapid Runtime on every request. For high security, you can validate this secret server-side and check if it equals the key shown in the Provider Dashboard under the Security tab of your API definition).
The username of the user that's making the request.
The name of the subscription (if any). The values can be:
- CUSTOM (if the user is subscribed to a custom plan.)
The version of the Rapid Runtime.
The IP address of the client making the request. It could be shown in a comma-separated format like "220.127.116.11, 18.104.22.168" where the first IP address belongs to the client and any subsequent IP represents a proxy.
The URL called by the client. For example,
The value of the
X-RapidAPI-Host header in the client's request. For example,
Updated about 1 month ago