Skip to content

Authenticating requests

Send a personal access token as a Bearer header, and keep it secret.

To authenticate requests, include an Authorization header with the value "Bearer {YOUR_AUTH_KEY}".

All authenticated endpoints are marked requires authentication in the endpoint reference.

Create a token at versedb.com/my/apps/custom/create. The token should be prefixed with "Bearer ".

Token Ownership & Responsibility#

API tokens act on behalf of the user who created them. Actions performed with a token are attributed to that user, and tokens inherit the user's permissions. You are responsible for all activity generated by your tokens.

Security#

Keep tokens secret and never embed them in client-side code. Rotate tokens if compromised and revoke tokens that are no longer in use.