← All documentation
API & integrations
Authentication & key access levels
Bearer token format, full vs restricted keys, and how to create keys safely.
Authorization header
Authorization: Bearer sk_live_xxxxxxxxxxxxxxxxAccess levels
| Level | Scopes | Use for |
|---|---|---|
| Full access | read + write | Zapier lead sync, provisioning scripts, write integrations |
| Restricted | read only | Reporting dashboards, analytics pulls, read-only audits |
Keys are shown once at creation. Store them in a secrets manager — never commit keys to git or expose them in client-side JavaScript.