Authentication
Most endpoints require auth. Use a session in the browser, or an API key from your app.
Two ways to authenticate
- Browser / dashboard — signed-in session cookies (same-origin requests).
- API clients —
Authorization: Bearer sk_…with a key from API Keys.
API key (recommended for integrations)
Create a key in the dashboard, then send it on every request. The platform prefers Bearer;x-api-key is also accepted as a fallback.
bash
curl "https://www.oflo.ai/api/v1/leads?limit=5" \
-H "Authorization: Bearer sk_your_api_key_here"Details: API Keys guide.
Validate a key
bash
curl -X POST "https://www.oflo.ai/api/v1/auth/validate-api-key" \
-H "Content-Type: application/json" \
-d '{"apiKey":"sk_your_api_key_here"}'Try it in the API Reference
Open the interactive API Reference, click Authorize, and paste Bearer sk_… (or use a logged-in browser session where supported).