Authentication

​

Get an API key

1. Open the dashboard and go to Settings → API keys.
2. Create a key with the role you need.
3. Copy it immediately — it is shown once — and store it as SIGMORA_API_KEY.

export SIGMORA_API_KEY="sk_live_..."

​

Send the key

curl https://api.sigmora.org/v1/capabilities \
  -H "Authorization: Bearer $SIGMORA_API_KEY"

import os
import requests

response = requests.get(
    "https://api.sigmora.org/v1/capabilities",
    headers={"Authorization": f"Bearer {os.environ['SIGMORA_API_KEY']}"},
    timeout=30,
)
print(response.json()["creditBalance"])

const response = await fetch("https://api.sigmora.org/v1/capabilities", {
  headers: { Authorization: `Bearer ${process.env.SIGMORA_API_KEY}` },
});
console.log((await response.json()).creditBalance);

{
  "success": false,
  "error": "Unauthorized: missing or malformed Authorization header",
  "code": "unauthorized"
}

​

A key belongs to one workspace

​

Roles

​

Keep keys safe

• Store keys in a secret manager or environment variable. Never commit them, and never ship them in browser or mobile code — call the API from your server.
• Keys are stored hashed and cannot be recovered. If you lose one, create a new key.
• Revoking a key in the dashboard takes effect within 30 seconds. Removing or suspending a member, or lowering their role, revokes the keys and connected apps they created.
• A key cannot create another key, so a leaked key cannot be used to create persistent access. Rotate it and revoke the old one.

​

Next steps