Authentication

Connect server systems, send contacts and orders, and identify signed-in widget users securely.

Authentication and scopes

Keep the API key on your server. Send only a short-lived identity token to the browser.

Authorization: Bearer tk_live_...

contacts:read  contacts:write  orders:read  orders:write  widget_identity:write

Rate limits and idempotency

120 requests / minute · HTTP 429 · Retry-After · Idempotency-Key 24h

Examples

curl · JavaScript · PHP

Security

Keep the API key on your server. Send only a short-lived identity token to the browser.

OpenAPI 3.1