Authentication

Authorization Header

All API requests require a valid API key passed in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Error Responses

Invalid or expired API keys will return a 401 error:

{
  "error": {
    "code": "unauthorized",
    "message": "Invalid or expired API key",
    "details": null
  }
}

Key Rotation

You can regenerate your API key at any time from your account settings. When you regenerate a key:

• The old key is immediately invalidated
• Active sessions using the old key will receive 401 errors
• You must update all integrations with the new key