Authentication

Learn how to authenticate requests to the Pivot API using your integration’s API key.

All requests to the Pivot API must be authenticated using your integration’s API key. This is done through the HTTP Authorization header.

How Authentication Works

When you make a request to the Pivot API, include your API key in the following format:

Authorization: Bearer YOUR_API_KEY

The word Bearer must be followed by a space and then your full API key.

For example, using curl:

curl ‘https://api.pivot.app/v1/spaces’ -H ‘Authorization: Bearer YOUR_API_KEY’

This key uniquely identifies your integration and controls what data and actions it has access to.

Security Notes

• Keep your API key secure. Do not expose it in frontend code, public repositories, or shared documents.
• If a key is compromised, rotate it immediately.
• API keys are tied to individual integrations. If you delete the integration, the key becomes invalid.