Authentication
The SuprSonic API uses API keys for authentication. Include your API key in the Authorization header:Getting Your API Key
- Log into your SuprSonic dashboard
- Go to Settings → API Keys
- Click “Generate New Key”
- Copy and store the key securely
API Key Types
- Admin Keys: For platform-level operations
- Account Keys: For account-specific operations
Security
- Never expose API keys in client-side code
- Store keys as environment variables
- Rotate keys regularly
API Key Management
- Regeneration: You can regenerate keys at any time from the dashboard
- Revocation: Revoked keys immediately stop working
- Multiple Keys: Create multiple keys for different integrations
- Key Names: Use descriptive names to track usage
Error Responses
Invalid API Key
Rate Limit Exceeded
Testing Your Authentication
Use this simple test to verify your API key is working:Account Context from API Keys
The SuprSonic API uses a secure model where your account context is automatically derived from your API key:- Account API Keys: Automatically scope requests to your specific account
- Admin API Keys: Provide system-wide access when using admin endpoints
- No Account IDs in URLs: Account information is derived from authentication, not URL parameters