API Reference · Authentication

Every request to the Cyrus API is authenticated with a single API key. Generate it in Dashboard → API keys and copy the full value when it appears — there is no separate API login and no TEST/LIVE split.

Authorize a request

Send your key as a bearer token.

Authorization: Bearer cyrus_9f2a…

Keep keys safe

• Use keys only from your backend — never in browser or mobile code.
• Create, copy immediately, and revoke keys in the dashboard. Full keys are revealed once; a revoked key is rejected with 401.
• The ops dashboard login (email and password) is separate and governs only the dashboard.