Skip to main content

Bearer token auth

Send your API key in the Authorization header:
Authorization: Bearer <API_KEY>
All /v1/* endpoints require this header.

API key formats

  • Live keys: sf_live_...
  • Test keys: sf_test_...
In self-hosted setups, use the key printed by npm run seed or any key you have provisioned via the dashboard.

Missing or invalid auth responses

{
  "error": {
    "code": "unauthorized",
    "message": "Missing or invalid Authorization header"
  }
}