The Developer APIs require authentication before you can consume any service, using Bearer Authentication.
How it works
- The access token is your app’s API key, generated from Developer > Apps in your admin console.
- Every endpoint requires authentication. Add the following header to each request:
Authorization: Bearer {access_token} - All API requests must be made over HTTPS. Calls made over plain HTTP will fail.
- Requests without valid authentication will also fail.
Getting your API key
See Getting started with the Developer APIs for how to create an app and retrieve its API key.
Keeping your API key safe
Treat your API key like a password: don’t share it, commit it to a public code repository, or expose it in client-side code. If you suspect your key has been compromised, reset it immediately; see Resetting an app’s API key.
Related Guides:
