Skip to main content
API & Webhooks

Authenticating API requests

Written By John Bromley

Last updated 12 days ago

All Sendr API requests must include your API key in the request header.

Header format

Include your API key in the X-API-Key header:

X-API-Key: YOUR_API_KEY

API keys are not accepted as a Bearer token. If your script or integration sends the key as Authorization: Bearer YOUR_API_KEY, the request will be rejected with a 401. Switch it to the X-API-Key header instead.

Example request

To check that your key works, call the /seat/me endpoint:

curl https://api.sendr.io/seat/me \
  -H "X-API-Key: YOUR_API_KEY"

Common authentication errors

StatusMeaning
401 UnauthorizedAPI key is missing, invalid, revoked, or sent in the wrong header
403 ForbiddenKey is valid but does not have access to this resource

If you receive a 401, check that your key is sent in the X-API-Key header (not Authorization), that it was copied in full, and that it has not been revoked. See "Creating and revoking API keys" if you need to generate a new key.

For every endpoint and request format, see the full API reference at docs.sendr.io.