Bearer token
All API requests require a Bearer token in theAuthorization header.
Getting your API key
API keys are provisioned when your account is set up. Each key is prefixed withcalldesk_ and should be kept secret.
API keys are hashed before storage. If you lose your key, you will need to generate a new one.
Key format
| Component | Example |
|---|---|
| Prefix | calldesk_ |
| Token | a1b2c3d4e5f6... (32 hex characters) |
| Full key | calldesk_a1b2c3d4e5f6... |
Security best practices
- Store API keys in environment variables, never in source code
- Rotate keys periodically
- Use separate keys for development and production
- Monitor key usage via the account endpoint