Authentication
API keys and scopes.
API key types
- Publishable (pk_) — safe in browsers, powers the widget
- Secret (sk_) — server-side only, full REST access
Authenticating requests
Send your secret key as a bearer token on every server-side request.
curl https://api.supportflow.ai/v1/tickets \
-H "Authorization: Bearer sk_live_xxxxxxxx"Scopes
- tickets:read / tickets:write
- knowledge:read / knowledge:write
- ai:resolve
- admin:manage