Authentication

The Postject API uses API keys to authenticate requests. You can view and manage your active API keys from the Settings page of your dashboard.


Using the API Key

Authentication to the API is performed via HTTP Bearer Auth. You must provide your API key in the Authorization header for all requests.

http
Authorization: Bearer pt_live_xxxxxxxxxxxxxxxxxxxx

Security Notice

Your API keys carry many privileges, so be sure to keep them incredibly secure! Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth.


Test vs Live Environments

Currently, Postject does not partition Test and Live environments at the key level. If you need to test integrations, simply use an unverified sender domain, which will automatically route your emails into a developmental dry-run (no actual emails are sent).