Authentication

​

Overview

​

Creating an API Key

​

Using Your API Key

​

Method 1: Authorization Header (Recommended)

curl -X GET "https://api.gostanna.com/api/clients?workspaceId=yourcompany.com" \
  -H "Authorization: Bearer sk-your-api-key-here"

​

Method 2: X-API-Key Header

curl -X GET "https://api.gostanna.com/api/clients?workspaceId=yourcompany.com" \
  -H "X-API-Key: sk-your-api-key-here"

​

Example: Testing Your API Key

curl -X GET "https://api.gostanna.com/api/metrics/summary?workspaceId=yourcompany.com" \
  -H "Authorization: Bearer sk-your-api-key-here"

const fetch = require('node-fetch');

const response = await fetch('https://api.gostanna.com/api/metrics/summary?workspaceId=yourcompany.com', {
  headers: {
    'Authorization': 'Bearer sk-your-api-key-here'
  }
});

const data = await response.json();
console.log(data);

import requests

headers = {
    'Authorization': 'Bearer sk-your-api-key-here'
}

response = requests.get(
    'https://api.gostanna.com/api/metrics/summary',
    params={'workspaceId': 'yourcompany.com'},
    headers=headers
)

data = response.json()
print(data)

​

Security Best Practices

​

Do’s

• Store API keys in environment variables
• Use server-side code to make API calls
• Rotate keys regularly
• Create separate keys for different environments (dev, staging, prod)
• Delete unused keys promptly

​

Don’ts

• Don’t embed keys in client-side JavaScript
• Don’t commit keys to version control
• Don’t share keys via email or chat
• Don’t use the same key across multiple applications

​

Managing API Keys

• View active keys: See all your active API keys and their last usage
• Delete keys: Remove keys that are no longer needed
• Monitor usage: Track when each key was last used

​

Troubleshooting

​

Common Error Messages

​

Testing Authentication

curl -I -X GET "https://api.gostanna.com/api/metrics/summary?workspaceId=yourcompany.com" \
  -H "Authorization: Bearer sk-your-api-key-here"