Authentication

Overview

The Extend platform uses Bearer token authentication for all API requests. You’ll need to include your API token in the Authorization header of each request.

Obtaining an API Token

1. Log into the Extend Dashboard
2. Navigate to Settings → Developer
3. Create a new API key or copy an existing one

Important: Keep your API tokens secure and never share them publicly. Rotate them regularly and immediately if they’re ever compromised.

Making Authenticated Requests

HTTP Header Format

Include your API token in the Authorization header:

$
Authorization: Bearer <API_TOKEN>

Example Requests

Using Node.js (fetch)

1
const makeAuthenticatedRequest = async () => {
2
  const response = await fetch('https://api-prod.extend.app/workflow_runs/workflow_run_1234', {
3
    method: 'GET',
4
    headers: {
5
      'Authorization': 'Bearer YOUR_API_TOKEN',
6
      'Content-Type': 'application/json',
7
      'Extend-Api-Version': '2024-11-14'
8
    }
9
  });
10
  
11
  return response.json();
12
};

Using cURL

1
curl -X GET https://api-prod.extend.app/workflow_runs \
2
  -H "Authorization: Bearer YOUR_API_TOKEN" \
3
  -H "Content-Type: application/json" \
4
  -H "Extend-Api-Version: 2024-11-14"
5
  -d '{ ... }'

Error Handling

If authentication fails, you’ll receive a 401 Unauthorized response. Common causes include:

• Missing the Authorization header
• Invalid token format
• Expired or revoked token
• Insufficient permissions for the requested resource