Overview
All API requests require authentication via Bearer tokens. This ensures secure and authorized access to your organization’s data.Tokens are tied to your organization and are rate-limited per key.
Creating API Keys
To generate an API key:- Go to your organization settings in the dashboard.
- Click Create API key on the top right.
- Enter a name and select a duration.
- Copy the token and store it securely.
Never expose your API key in public repositories or frontend code.
Using Bearer Tokens
Include your token in theAuthorization
header of every request:
Examples
HTTP Request Example:Token Management
Rotating API Keys
Rotating API Keys
It’s a best practice to rotate your API keys periodically.
- Generate a new key.
- Update your environment variables.
- Revoke the old key.
Revoking API Keys
Revoking API Keys
To revoke a key:
- Go to organization settings
- Click the … icon next to the key you want to disable, and then click on Delete API Key.
Common Issues
Invalid Token
Invalid Token
Ensure your token is correct, has no extra spaces, and is included in the
Authorization
header.Expired / Revoked Token
Expired / Revoked Token
If your request returns
401 Unauthorized
, check if the key was revoked or regenerated. Replace it with a valid key.