Use the API key directly
Send the API key in theAuthorization header:
Key types
User API keys
User keys act as the signed-in user.- Personal clients only
- Personal templates only
- Best for individual practitioner workflows
Organisation API keys
Organisation keys act as the active organisation.- Organisation clients only
- Organisation templates only
- Best for team-wide integrations and PMS sync flows
Recommended first call
CallGET /me after you provision a key.
It tells you:
- whether the key is a
userororganizationkey - which human user created the key when applicable
Common auth failures
Requests are rejected when:- the key is invalid or revoked
- the key scope does not match the client or template you requested
- the organisation has not enabled API key access