> This page is for version v2024-12-23.
> For other versions, use one of these documentation indexes:
> - v2026-02-09 (default): https://docs.extend.ai/2026-02-09/llms.txt
> - v2025-04-21: https://docs.extend.ai/2025-04-21/llms.txt
> - v2024-12-23: https://docs.extend.ai/2024-12-23/llms.txt

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.extend.ai/llms.txt
> Use this file to discover all available pages before exploring further.
>
> ## API version
> The current API version is `2026-02-09`, served at the site root (no version prefix in URLs).
> If this page URL contains `/2025-04-21/` or `/2024-12-23/`, you are reading an older API version.
> Prefer the current docs at https://docs.extend.ai/llms.txt unless the user explicitly needs that older version.
> Do not treat older-version pages as the source of truth for new integrations.

# Authentication

## Overview

The Extend platform uses Bearer token authentication for all API requests. You'll need to include your API token in the `Authorization` header of each request.

## Obtaining an API Token

1. Log into the [Extend Dashboard](https://dashboard.extend.app)
2. Navigate to Settings → Developer
3. Create a new API key or copy an existing one

**Important**: Keep your API tokens secure and never share them publicly. Rotate them regularly and immediately if they're ever compromised.

## Making Authenticated Requests

### HTTP Header Format

Include your API token in the Authorization header:

```bash
Authorization: Bearer <API_TOKEN>
```

### Example Requests

#### Using Node.js (fetch)

```typescript
const makeAuthenticatedRequest = async () => {
  const response = await fetch('https://api-prod.extend.app/workflow_runs/workflow_run_1234', {
    method: 'GET',
    headers: {
      'Authorization': 'Bearer YOUR_API_TOKEN',
      'Content-Type': 'application/json',
      'Extend-Api-Version': '2024-11-14'
    }
  });
  
  return response.json();
};
```

#### Using cURL

```curl
curl -X GET https://api-prod.extend.app/workflow_runs \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Extend-Api-Version: 2024-11-14"
  -d '{ ... }'
```

## Error Handling

If authentication fails, you'll receive a `401 Unauthorized` response. Common causes include:

* Missing the Authorization header
* Invalid token format
* Expired or revoked token
* Insufficient permissions for the requested resource