API: Authentication

Overview

Syllecta public APIs use bearer tokens (API keys). Every request must include:

  • Authorization: Bearer <api_key>

API keys map to a tenant, plan, and usage limits in Backoffice.

Base URLs

  • Cloud: use the base URL provided in your workspace (e.g., https://cloud.syllecta.example).
  • Local: http://localhost:4000 (cloud-api dev server).

Errors

StatusDescription
403Missing/invalid API key (Forbidden resource)
404Tenant slug not found (slug route only)
429Usage limit exceeded (idempotency lock path)
500Service unavailable

Related docs