API Reference
Authentication
Authenticate requests to the Sureshake API.
Sureshake APIs use bearer-token authentication.
Authorization header
curl -H "Authorization: Bearer $TOKEN" \
https://api.sureshake.com/api/v1/entitiesGuidelines
- Generate and store tokens server-side.
- Never expose long-lived tokens in browser code.
- Rotate credentials periodically.
- Scope permissions to least privilege.
Common responses
401 Unauthorized: missing or invalid token.403 Forbidden: token is valid but missing required permission.
Validate auth early by calling a low-risk endpoint before running multi-step workflows.