API Authentication

Authentication Overview

All API requests must be authenticated by passing a token in the Authorization header of each HTTP request.

Personal Access Tokens

Personal Access Tokens Personal access tokens are the recommended authentication method. To authenticate a request, include an Authorization header with the type Bearer, followed by your token:

Authorization: Bearer eyJhbGciOiJIUzI1NiIXVCJ9

You can create and manage your tokens on the Personal Access Tokens page.

Keep your tokens secure. Treat personal access tokens like passwords — never embed them in client-side code, commit them to public repositories, or expose them in any publicly accessible location.