API Keys
All API requests require an org-level API key. Keys are created and managed in your organization’s Settings > API Keys tab in the dashboard. Each key is assigned a role that determines its permissions. The key inherits all permissions of its assigned role.Using Your Key
Pass the key in theAuthorization header with a Bearer prefix:
Key Security
- Keys are shown once at creation time. Store them securely.
- Use environment variables — never hardcode keys in source code.
- Assign the minimum role needed for your use case.
- Revoke keys immediately if compromised.
Error Responses
| Status | Meaning |
|---|---|
401 | Missing, malformed, or revoked API key |
403 | Key is valid but lacks the required permission |