SureshakeDocs
API Reference

Authentication

Authenticate requests to the Sureshake API.

Sureshake APIs use bearer-token authentication.

Authorization header

curl -H "Authorization: Bearer $TOKEN" \
  https://api.sureshake.com/api/v1/entities

Guidelines

  1. Generate and store tokens server-side.
  2. Never expose long-lived tokens in browser code.
  3. Rotate credentials periodically.
  4. Scope permissions to least privilege.

Common responses

  • 401 Unauthorized: missing or invalid token.
  • 403 Forbidden: token is valid but missing required permission.

Validate auth early by calling a low-risk endpoint before running multi-step workflows.

On this page