Authorization header:
mithunai_sk_. Owners and Administrators create them in the console under API keys. The secret is shown once. See API keys for creating, rotating and revoking keys.
What a key can do
A key holds one role and can do exactly what a person with that role can do, in the organisation it was created in.- A key always acts in its own organisation. It cannot reach another.
- Its role is fixed when it is created. To change it, create a new key and revoke the old one.
- A key cannot manage API keys or people, whatever its role. The API key endpoints, adding, changing and removing a member, and every invitation endpoint require a signed-in console session. A key can list members.
Other credentials
A widget key is not accepted where an API key is expected, and an API key is not accepted on the widget endpoints.
GET /health and GET /ready need no credential.