Authentication & rate limits - Da-Vinci API

Every endpoint works without a key. Keys exist only to raise rate limits.

Tiers

Tier	Limit	How
Anonymous	60 requests / hour per IP	Just call the API
Free key	1,000 requests / day	Email us — tell us what you’re building
Patron key	10,000 requests / day	Included with a Patron membership

Using a key

Pass it in the X-API-Key header:

curl "https://venivididavinci.com/api/v1/search?q=anatomy" \
  -H "X-API-Key: your-key-here"

Reading your limits

Every response carries your current window:

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 41
X-RateLimit-Reset: 1784418134

X-RateLimit-Reset is a Unix timestamp — when your window starts over. When you exceed the limit you get a 429:

{
  "error": {
    "code": "rate_limited",
    "message": "Anonymous limit is 60 requests/hour. Pass an X-API-Key header for more."
  }
}

Library data is served with long CDN cache headers. If you request the same URLs repeatedly, most hits never touch the rate limiter at all — cache-friendly clients effectively get more throughput for free.