Skip to main content
All API requests require authentication via API Key. Create API keys in your Autype dashboard under Settings → API Keys.

​
Providing your API key

Include your API key in the X-API-Key header (case-insensitive): 
curl -H "X-API-Key: ak_your_api_key_here" https://api.autype.com/api/v1/ext/...
Only API keys with the ak_ prefix are accepted. Bearer authentication and JWT tokens are not supported on the Developer API.

​
API key scope

  • API keys are bound to your organization
  • All operations and resources are scoped to your organization
  • Token costs are deducted from your organization’s balance

​
Security best practices

API keys should only be used in server-side applications. Never include them in JavaScript that runs in the browser.
Store your API key in environment variables rather than hardcoding it in your source code.
export AUTYPE_API_KEY=ak_your_api_key_here
Create new API keys periodically and revoke old ones. You can manage keys in your dashboard.
Create separate API keys for development, staging, and production environments.

​
Error responses

Status CodeMessageDescription
401API key is requiredNo API key was provided in the request
401Invalid or expired API keyThe API key is invalid or has been revoked