Authentication

Authentication method depends on the deployment type:

• Hosted demo (demo.questa-ai.online) — an evaluation API token, sent as a bearer token in the Authorization header. For testing and proof-of-concept only.
• Self-hosted (production) — a commercial license key that activates the service. No per-request token.

The hosted demo is for evaluation only. Production workloads must run on a self-hosted instance — see Hosted vs Self-Hosted.

Hosted Demo — Evaluation API Token

When using demo.questa-ai.online, send your evaluation token in the Authorization header using the Bearer scheme:

curl -X POST https://demo.questa-ai.online/anonymize/text \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -d '{"text": "Test."}'

Every /anonymize/* endpoint requires the token. GET / and GET /health are public.

Evaluation Limits

Evaluation tokens are metered and enforced server-side:

Limit	Value	Exceeded
Total requests	1,000 per token (lifetime)	403 Forbidden
Rate	30 requests/minute per token	429 Too Many Requests (with Retry-After)

• Only the anonymization endpoints count toward these limits — POST /anonymize/text and the file uploads (/anonymize/{pdf,docx,csv,excel}). Polling GET /anonymize/status/{job_id} and GET /anonymize/entities require a valid token but do not count.
• Tokens do not expire by time; they stop working once the 1,000-request cap is reached.

Getting an Evaluation Token

Email techsupport@questa.solutions with your organisation name and use case. Evaluation tokens are issued for testing and proof-of-concept only — for production use within your organisation, the service is licensed for self-hosting. There are no paid hosted tiers.

---

Self-Hosted — License Key

Production runs on a self-hosted instance, activated by a commercial license key rather than a per-request token. Requests to your own instance need no Authorization header.

Licenses are issued per instance. When you purchase a license we provide the key along with the full setup instructions for your environment.

To get a license, contact techsupport@questa.solutions. See Self-Hosting.

---

Next: cURL Integration