The Ocrolus API uses API Keys and Secrets sent via HTTP basic authentication headers to identify the user making each request.

Unauthenticated requests will fail with the following JSON response:

{
  "status": 400,
  "message": "Authentication failed",
  "code": 1200,
  "response": null
}

📘

To learn how to embed credentials in your HTTP request, view the code samples in the following endpoint documentation.

Generating the API Key & Secret

You generate your unique API Key and Secret from the My Organization page on our web app.
Your API Key and Secret are the digital keys to your account. Be sure to keep them secure.

API Key requirements for a new API Acccount

When creating a new API Account, note the following requirements for the API Key:

• You must use a valid email address that can succesfully receive messages.
• The email address must be unique to the new Account and not be associated with another Account in your Organization.

Managing your API Account

You can manage your API Account(s) on the My Organization page on our web app.
On the page, you can perform tasks, including:

• Reset the password for an existing API Account
• Remove an API account.