Skip to content

Authentication

API keys, scopes and rate limits.

API keys

Keys are generated under Settings → Developers and shown once. Send the key in the Authorization header as a Bearer token. A key belongs to one organization: it cannot read another's data, whatever the request parameters say.

Limits

Requests are rate-limited per key. On overflow you get a 429 with a Retry-After header; honour it instead of retrying immediately, or the window extends.