Skip to content

Authentication

User profile and API key management. These endpoints require a Cognito JWT token (Bearer authentication), not an API key.

Auth endpoints use Cognito JWT tokens (Bearer authentication), not API keys. Sign in to auto-fill your token for the Try It panels below.

Loading...

Rotating keys: To rotate a key, create a replacement with POST /auth/keys, switch your clients to the new key, then revoke the old one with DELETE /auth/keys/{key_id}. Revoking an unknown key returns 404; revoking a key that was already revoked is idempotent and returns 200.