Authentication

All Partner API endpoints require authentication with your partner API key.

API key header

x-api-key: your_api_key_here

Alternatively, use the Authorization header:

Authorization: Bearer your_api_key_here

All requests with a body must also include:

Content-Type: application/json

Every successful response is wrapped in a standard envelope:

{
  "status": "success",
  "data": { }
}

Error responses return the appropriate HTTP status code with details in the body:

{
  "statusCode": 401,
  "message": "Unauthorized"
}

Treat your API key like a password. Never expose it in client-side code or commit it to source control.

API keys can be rotated at any time from your dashboard. Rotating a key immediately invalidates the previous one.