API ReferenceAuthentication

API Authentication

Secure your API requests using API keys.

API Keys

All API requests require authentication using an API key. Include your key in the request header:

HTTP Header
Authorization: Bearer YOUR_API_KEY

Generating API Keys

  1. Go to Settings → API Keys
  2. Click "Generate New Key"
  3. Give your key a descriptive name
  4. Copy and securely store your key

Keep Your Keys Secret

Never expose API keys in client-side code or public repositories. Use environment variables.

Example Request

cURL
curl -X GET "https://your-instance.elestio.app/api/v1/employees" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

Authentication Errors

Error CodeDescription
UNAUTHORIZEDMissing or invalid API key
FORBIDDENAPI key lacks required permissions
KEY_EXPIREDAPI key has been revoked or expired

Key Permissions

API keys can be scoped with specific permissions:

  • Read - View employees and conversations
  • Write - Create and update resources
  • Delete - Remove resources
  • Admin - Full access including settings