Authentication

Authenticate your API requests with API keys and tokens.

5 min read

All API requests must be authenticated using an API key. This guide covers how to create, use, and manage your API keys.

Creating an API key

1Go to Settings → API Keys.
2Click "Create API Key".
3Give the key a descriptive name (e.g., "Production Server", "Staging").

4

Select the permissions scope (read-only, read-write, or full access).

5Click "Create". Copy the key immediately — it will not be shown again.

Store your API key securely. Never expose it in client-side code, public repositories, or logs. If a key is compromised, revoke it immediately from the API Keys settings.

Using your API key

Include your API key in the Authorization header of every request:

Rate limits

Rate limit headers are included in every response: X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset.

Plan	Requests/minute	Requests/day
Starter	60	10,000
Professional	120	50,000
Business	300	200,000

Authentication

Creating an API key

Using your API key

Rate limits

Error responses

Related Articles

Invoices API

Bills API

Webhooks