Using the API

Authenticating, what you can read and write, and how webhooks tell you about changes.

Tokens

Create a token from the developer screen. The token is shown once, when it is made: it is stored hashed, so nobody, including us, can show it to you again. Make a new one if you lose it.

Authenticating

Send the token as a bearer token:

Authorization: Bearer sa_your_token_here

Webhooks

Rather than asking repeatedly whether anything has changed, subscribe to an event and we will post to your endpoint when it happens. Deliveries are retried when your server is unavailable.

Last updated 5 September 2026