The Verbose API authenticates with a bearer key. Each key is scoped to one
workspace and grants full access to it.
Create a key
- In the dashboard, open Settings → API keys.
- Create a key and copy it immediately — it’s shown once and stored only as
a hash.
- Keep it server-side (a secrets manager or environment variable). Never ship it
in client-side code.
Keys look like as_live_…. Revoke a key anytime in Settings; revocation is
immediate.
Authenticate a request
Send the key as a bearer token in the Authorization header:
curl https://astrasend-mocha.vercel.app/api/public/me \
-H "Authorization: Bearer as_live_xxxxxxxxxxxxxxxxxxxx"
A valid key returns the workspace it belongs to:
{ "ok": true, "workspace": { "id": "8f3c…", "name": "Acme" } }
An invalid or missing key returns 401:
{ "ok": false, "error": "Invalid or missing API key" }
Use GET /api/public/me as a health check to confirm a key works before wiring
it into your integration.