New Docs

Authentication

How API calls are authenticated.

Every call needs two credentials:

  1. X-API-Key: the tenant's API key, created in the tenant console. It decides which tenant you act for.
  2. Authorization: Bearer <token>: a short-lived service token that proves which platform service is calling.
curl https://docs-service.example.com/v1/ping \
  -H "X-API-Key: $NEXTDOCS_API_KEY" \
  -H "Authorization: Bearer $SERVICE_TOKEN"

A missing or invalid credential returns 401. Keep API keys on the server; never ship them to a browser.

Last updated