API reference
API Authentication and Rate Limits
Every request except GET /models needs an API key. Keys belong to your account and spend its credits.
Get API keyBy the Wan 3 API team ·
Send the key
Put the key in the Authorization header with the Bearer scheme. Keys start with sk- and are 43 characters long.
http
Authorization: Bearer sk-...curl "https://api.wan3api.org/v1/balance" \
-H "Authorization: Bearer $API_KEY"Keep keys secret
- Call the API from your server, never from a browser or mobile app, where anyone can read the key.
- Store keys in environment variables or a secret manager, not in source control.
- Use one key per app or environment, so you can revoke one without touching the others.
- Revoke a key the moment you think it leaked; requests with it fail at once.
Rate limits
Each key can make 60 requests a minute. Over that you get 429 rate_limited with a Retry-After header. Separately, an account can have 3 renders processing at once; more returns 429 too_many_running_tasks.
Auth errors
A missing, malformed or revoked key returns 401 invalid_api_key. A suspended account returns 403 account_disabled.