API Keys
All API requests require a Bearer token in theAuthorization header. You can create API keys in the dashboard.
Key format
Keys follow the formatsnd_{keyId}_{secret}. The full key is only shown once at creation — store it securely.
Permissions
API keys currently support thesend permission, which allows sending emails through the domain they’re scoped to.
Dashboard Authentication
The dashboard uses JWT tokens obtained via/api/auth/login. These are separate from API keys and are used for managing domains, keys, webhooks, and settings.
Error Responses
| Status | Meaning |
|---|---|
401 | Missing or invalid API key |
403 | Key doesn’t have permission, email not verified, or domain not verified |
429 | Rate limit or plan limit exceeded |