Authentication

Published 26 January 2026, Updated 26 January 2026

The API uses bearer tokens for authentication. Create and manage API keys in your system’s admin tooling. You’ll need Administrator credentials to access the settings menu.

When creating or editing an API key (bearer token), you must choose its access level: read-only, read/write, or admin.

Remember that your API key is a secret. Do not share it or expose it in any client-side code (browsers, apps). Load keys from environment variables or a key management service on the server.

API keys are provided via HTTP Bearer authentication:

Authorization: Bearer YOUR_API_KEY

Lost keys cannot be retrieved. Issue a new key and revoke the old one.