Authentication
Authenticate requests to the Onboard REST API using your API key.
Onboard REST API uses header authentication.
Include the following header in your requests:
Authorization: Token YOUR_API_KEY
Replace YOUR_API_KEY with an API key from Company settings → API key (sign in to Onboard, then open Company settings to generate or copy a key).
Security Notes
- Never expose API keys in client-side or mobile code.
- Rotate keys periodically.
- Use separate keys per environment.
For a concise pre-launch and production review, use the Security checklist.
How is this guide?