Authentication

All API requests require authentication via API keys or OAuth tokens.

API Keys

Generate and manage your API keys in the Developer Portal. Each key has specific permissions and can be restricted to certain IP addresses.

// Include in request headers
Authorization: Bearer your_api_key_here
Security Notice: Never expose API keys in client-side code. Use environment variables or secure storage.
OAuth 2.0

For more secure access, use OAuth 2.0 with the authorization code flow.

// OAuth token request
POST /oauth/token
grant_type=authorization_code
client_id=your_client_id
client_secret=your_client_secret
code=authorization_code