Authentication

Bearer tokens, scoped API keys, and how to authenticate every request to the Kortex API.

What's coming

• Scoped API keys — bind a key to a workspace and one or more accounts, with fine-grained resource:action scopes.
• Predictable rate limits — per-account burst and daily limits, with X-RateLimit-* headers on every response.
• Interactive reference — try any endpoint from the browser using the API Reference tab.