The Extend API uses Bearer token authentication for all API requests. You’ll need to use your API token when instantiating the client if you’re using the SDK or in the Authorization header of each request if you’re using the API directly.
Important: Keep your API tokens secure and never share them publicly. Rotate them regularly and immediately if they’re ever compromised.
If authentication fails, you’ll receive a 401 Unauthorized response. Common causes include: