Authentication and credits

Send Authorization: Bearer with a RealtyCrawl API key. Store it in server configuration. Keys can be rotated or revoked from the dashboard. Use X-Max-Credits to cap a request. Failed source requests are refunded; unavailable capabilities fail before a debit. POST operations accept a stable Idempotency-Key. Do not reuse it for a different request.