LeadMagic — API auth, credits & plans

Rules

1. Never echo or log LEADMAGIC_API_KEY. Read from env only; rotate immediately if a key was pasted into chat or committed.
2. REST auth header is X-API-Key, not Authorization: Bearer.
3. Prefer hosted MCP (https://mcp.leadmagic.io/mcp) for agent workflows — OAuth, no key in shell history.
4. Preflight every run: GET /v1/credits (free). Preview anything ≥ 500 credits: POST /v1/batch/preview-cost (free).

Base URL & key

• Base: https://api.leadmagic.io
• Key: app.leadmagic.io → Settings → API

curl -sS "https://api.leadmagic.io/v1/credits" -H "X-API-Key: $LEADMAGIC_API_KEY"

Plans (what a run can afford)