Skip to main content

API key scheme

EDN authenticates requests with an API key. You present the key in the Authorization header as a bearer token:
Every authenticated endpoint expects this header. Requests without a valid key are rejected.

Managing keys

Create and manage API keys from the Console. Keep each key secret: do not commit it to source control and do not expose it in client-side code. If a key is leaked, revoke it in the Console and mint a new one.

Example

Unauthenticated endpoints

Two endpoints do not require an API key:
  • GET /api/v1/health - service health check.
  • GET /api/v1/connectors - list the available connectors.
Every other endpoint requires the Authorization: Bearer <key> header.