Security
Authentication
Cloud API uses API key authentication. Include your key in every request to authenticate and authorize access to your workspace.
API key usage
Generate keys in the dashboard and store them securely. Keys identify your application and inherit workspace-level permissions.
Authorization header
Authorization: Bearer <YOUR_API_KEY>
Security notes
- Never expose keys in client-side code or public repositories.
- Rotate keys regularly and revoke unused keys immediately.
- Use environment variables and secret managers for storage.
Sample request
Example using curl to list recent audit events.
curl -X GET "https://api.cloudplatform.dev/v1/audit/events" \
-H "Authorization: Bearer <YOUR_API_KEY>" \
-H "Content-Type: application/json"