Standards-based authPersonal access tokens sent as Authorization Bearer. Works with every HTTP client, Postman, and MCP client out of the box.
Scoped by designEvery token is limited to the scopes you pick. Least-privilege by default, revocable from your dashboard.
Runnable examplesPaste your token once at the top of the page — every endpoint's curl / PHP / Node.js sample runs live in your browser.