> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dune.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Authentication
The Dune API relies on API keys for authentication. Your API key grants access and determines billing details for private queries, so safeguard it diligently!
## Generate an API key
In order to generate a new API key, go to settings -> API -> create new API key.
* Dune has two types of account: `user` account and `team` account. A team can have many users. A user can join many teams.
* Each user or team account has its own context. Queries created under a team account can only be managed within the team account context.
* An API key belongs to a specific context, and is either associated with a user account or a team account.
Never share your secret API keys in public repositories or other accessible areas.
## API key scopes
Each Dune API key is issued with a **scope** that controls what it can do. Endpoints in this reference list the **minimum required API key scope** — keys with broader scopes can also call them.
| Scope | Access |
| ------------ | --------------------------------------------------------------------------------------------------------------------------------- |
| `Read` | Read-only endpoints (query results, datasets, usage, status checks). |
| `Read/Write` | Everything `Read` allows, plus mutating endpoints (create/update/archive queries, manage uploads, materialized views, pipelines). |
## Authentication & making API calls
You can authenticate either with the API header or with query parameter to start making API calls. We illustrate below with [execute query endpoint](../executions/endpoint/execute-query) as an example.
To authenticate via the API header, include an `x-dune-api-key` property in your request header.
```bash theme={null}
curl -X POST -H x-dune-api-key:{{api_key}} "https://api.dune.com/api/v1/query/{{query_id}}/execute"
```
```python theme={null}
import requests
url = "https://api.dune.com/api/v1/query/{{query_id}}/execute"
headers = {"X-DUNE-API-KEY": ""}
response = requests.request("POST", url, headers=headers)
print(response.text)
```
```javascript theme={null}
const options = {method: 'POST', headers: {'X-DUNE-API-KEY': ''}};
fetch('https://api.dune.com/api/v1/query/{{query_id}}/execute', options)
.then(response => response.json())
.then(response => console.log(response))
.catch(err => console.error(err));
```
```go theme={null}
package main
import (
"fmt"
"net/http"
"io/ioutil"
)
func main() {
url := "https://api.dune.com/api/v1/query/{{query_id}}/execute"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("X-DUNE-API-KEY", "")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := ioutil.ReadAll(res.Body)
fmt.Println(res)
fmt.Println(string(body))
}
```
```php theme={null}
"https://api.dune.com/api/v1/query/{{query_id}}/execute",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"X-DUNE-API-KEY: "
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}
?>
```
```java theme={null}
HttpResponse response = Unirest.post("https://api.dune.com/api/v1/query/{{query_id}}/execute")
.header("X-DUNE-API-KEY", "")
.asString();
```
Alternatively, use an `api_key` query parameter for authentication.
```bash theme={null}
curl -X POST "https://api.dune.com/api/v1/query/{{query_id}}/execute?api_key={{api_key}}"
```
```python theme={null}
import requests
url = "https://api.dune.com/api/v1/query/{{query_id}}/execute"
querystring = {"api_key": ""}
response = requests.request("POST", url, params=querystring)
print(response.text)
```
```javascript theme={null}
const options = {
method: 'POST',
};
const apiKey = '';
const queryId = '{{query_id}}';
const url = `https://api.dune.com/api/v1/query/${queryId}/execute?api_key=${apiKey}`;
fetch(url, options)
.then(response => response.json())
.then(response => console.log(response))
.catch(err => console.error(err));
```
```go theme={null}
package main
import (
"fmt"
"net/http"
"io/ioutil"
)
func main() {
url := "https://api.dune.com/api/v1/query/{{query_id}}/execute?api_key="
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := ioutil.ReadAll(res.Body)
fmt.Println(res)
fmt.Println(string(body))
}
```
```php theme={null}
"https://api.dune.com/api/v1/query/{{query_id}}/execute?api_key=",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}
?>
```
```java theme={null}
HttpResponse response = Unirest.post("https://api.dune.com/api/v1/query/{{query_id}}/execute?api_key=")
.asString();
```