Authentication

The Macro by Mark API uses API key authentication. Every request must include your key in the X-API-Key HTTP header.

Getting your API key

1. Sign in to your Macro by Mark dashboard.
2. Navigate to Settings → API Keys.
3. Click Create new key, give it a descriptive name, and copy the value.

Using your API key

Pass the key in the X-API-Key request header on every API call:

curl -G https://api.macrobymark.com/v1/indicators/search \
  --data-urlencode "q=unemployment" \
  -H "X-API-Key: YOUR_API_KEY"

SDK examples

import requests

headers = {"X-API-Key": "YOUR_API_KEY"}
params  = {"q": "unemployment"}

resp = requests.get(
    "https://api.macrobymark.com/v1/indicators/search",
    headers=headers,
    params=params,
)
resp.raise_for_status()
print(resp.json())

const resp = await fetch(
  "https://api.macrobymark.com/v1/indicators/search?q=unemployment",
  { headers: { "X-API-Key": "YOUR_API_KEY" } }
);
const data = await resp.json();
console.log(data);

const response = await fetch(
  "https://api.macrobymark.com/v1/indicators/search?q=unemployment",
  {
    headers: { "X-API-Key": process.env.MACRO_API_KEY ?? "" },
  }
);
const data: unknown = await response.json();

Rate limits

Rate limits are enforced per API key on a rolling 60-second window.

Rate limit headers

Every response includes the following headers so you can track consumption:

Handling 429 errors

When you exceed the rate limit the API returns HTTP 429 with a Retry-After header indicating how many seconds to wait:

HTTP/1.1 429 Too Many Requests
Retry-After: 14
X-RateLimit-Limit: 20
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1715644814

{
  "error": "rate_limit_exceeded",
  "message": "You have exceeded your request quota. Retry after 14 seconds."
}

Implement exponential back-off in your client to avoid hammering the API after a 429:

import time, requests

def get_with_retry(url, headers, params, max_retries=5):
    delay = 1
    for attempt in range(max_retries):
        resp = requests.get(url, headers=headers, params=params)
        if resp.status_code == 429:
            retry_after = int(resp.headers.get("Retry-After", delay))
            time.sleep(retry_after)
            delay *= 2
            continue
        resp.raise_for_status()
        return resp.json()
    raise RuntimeError("Max retries exceeded")

Key rotation and revocation

• Rotate keys from Settings → API Keys in the dashboard.
• Revoked keys are invalidated immediately.
• You may have up to 5 active keys per account; Enterprise accounts can request higher limits.

Security best practices