API keys
Every request (exceptGET /health) must include an x-api-key header with
your API key:
- Your tenant is derived only from the API key — never from any field in the request body or other headers. A key issued for your organization cannot read or modify another organization’s data.
- Contact RiDERgy to have the Energy Management API enabled for your account
and to receive an API key. Without the feature enabled, requests fail with
403 FEATURE_NOT_ENABLED. - Keys can expire. An expired or invalid key returns
401 UNAUTHORIZED(the same generic error for both, so no information about key validity is leaked).

