Authentication
Authenticate Public API requests with X-Api-Key or Bearer tokens
Every Public API request must include a valid organization API key. Keys are created in the dashboard under Organization settings → API keys.
Supported headers
Send the key with either header:
| Header | Example |
|---|---|
X-Api-Key | X-Api-Key: ct_... |
Authorization | Authorization: Bearer ct_... |
If both are present, X-Api-Key is preferred. The Authorization value must use the Bearer scheme.
Examples
curl https://api.cowtic.com/api/v1/events \
-H "X-Api-Key: YOUR_API_KEY" \
-H "Accept: application/json"const response = await fetch("https://api.cowtic.com/api/v1/events", {
headers: {
"X-Api-Key": process.env.COWTIC_API_KEY!,
Accept: "application/json",
},
});Request identity
Successful authentication attaches the key to one organization. All reads and writes are limited to that organization. Missing or invalid keys return 401 with application/problem+json.
See Errors for the response shape and Scopes for permission checks after authentication.
Request IDs
Every response includes X-Request-Id. You may send your own id with X-Request-Id; otherwise the API generates one. Include it when contacting support.