Authentication

Every API request is authenticated with a personal Bearer token (Laravel Sanctum).

API Overview 1 min read Updated 1 day ago

Every API request is authenticated with a personal Bearer token (Laravel Sanctum).

code

Authorization: Bearer YOUR_API_TOKEN

Tokens belong to a customer account and inherit that account’s permissions.
Admin API routes under /api/admin/v1 require an admin token and are not part of the public reference.
Never embed tokens in client-side code you ship to users; keep them server-side.

Rotating tokens

If a token is exposed, revoke it and create a new one — existing requests stop working immediately.

Was this page helpful?