API keys
New keys are generated from random bytes and shown in full when created. We store a keyed hash of the full key, along with a short identifier for listing it. The full key cannot be retrieved later from the account page.
Security
How we handle access to the API.
A clear account of the protections we can describe today. If you find a problem, you can report it directly to our team.
01 / 03
What is in place
Account access
Creating, listing, and revoking API keys requires a signed-in account. An API key is used for data requests; it cannot manage the other keys on an account.
Website connection
The public OddsLink website uses HTTPS and redirects HTTP requests to HTTPS.
02 / 03
Report a security issue
Use the contact form to tell us what you found and how to reproduce it. Please do not include a full API key in your report.
Report a security issue03 / 03
Further questions
For questions about security controls or contract requirements, contact the team. Any Enterprise service or security terms are agreed directly; this page does not state a certification or service-level guarantee.