Authentication

API Keys

API keys are the primary way to authenticate with the Kerabie API. They're scoped per organisation and never expire unless you revoke them.

Create a key

1. Go to Settings → API → New API Key
2. Give it a name (e.g. "CRM integration")
3. Copy the key; it's shown only once

Use it in requests

Authorization: Bearer ker_live_abc123...
X-Kerabie-Org: 42
Content-Type: application/json

Or with the SDK:

const kerabie = new KerAbieClient({
  apiKey: 'ker_live_abc123...',
  orgId: 42,
});

Key prefixes

Revoking keys

Go to Settings → API and click the trash icon next to any key. Revocation is immediate.

Keeping keys secure

• Store keys in environment variables, never in source code
• Use separate keys per integration so you can revoke one without affecting others
• Rotate keys periodically for sensitive integrations