Authentication

Every request carries a secret API key as a bearer token.

Send your key in the Authorization header of every request:

curl https://api.keryk.io/v1/messages \
  -H "Authorization: Bearer $KERYK_API_KEY"
  • Keys are created in the dashboard. Keryk stores only a hash: copy the key when it is shown, it is not displayed again.
  • Keep keys on your server. Never put a key in a mobile app or in browser code.
  • A missing or revoked key returns 401.

Draft

Key prefixes, test keys and per-key permissions are still being designed. [TEST KEY FORMAT]