Skip to main content

Authentication

Each request sends your API key as a bearer token:

Authorization: Bearer trx_…

Getting a key​

Contact us to get an API key. It is shown once, so store it in your secret store right away.

Rotating or revoking a key​

To rotate a key, contact us for a new one, switch your platform to it, and then ask us to revoke the old one. From then on, requests with the old key are refused with 401 invalid_api_key. If a key may have leaked, contact us to revoke it at once.

Keep the key on your server​

Anyone with the key can create clients in your account. Send it from your server only, never from a browser or a mobile app.