Authentication

The API uses two credential types, and which one an endpoint expects varies per endpoint — check the table in the API Reference before integrating.

API key

Send as a header:

X-API-Key: <API_KEY>

Used by: bulk-create links, list/search links, get link by ID, click analytics.

Bearer token

Send as a header:

Authorization: Bearer <ACCESS_TOKEN>

Used by: create link, list domains.

Both credential types are issued from the Routeon customer portal. Treat both as secrets: don’t embed them in client-side code, and don’t commit them to source control.