Authentication

Every request needs your API key. Keys look like sca_xxxxxxxxxxxx_xxxxxxxx….

Create a key

In the dashboard sidebar, open API & MCP, go to API keys and click New API key. Copy it right away. It is shown only once.

Use either header. Both work the same.

curl https://app.scalysis.com/api/v1/orders/1368642/outcome \
  -H "Authorization: Bearer YOUR_API_KEY"

curl https://app.scalysis.com/api/v1/orders/1368642/outcome \
  -H "X-API-Key: YOUR_API_KEY"

For POST requests, also send Content-Type: application/json.

{ "success": false, "error": "Unauthorized" }

The header is missing, or the key was copied with a space or a missing character.
The key was deleted in the dashboard.

Keep keys on your server. Never put them in a website, an app or a public repo. If one leaks, delete it in the dashboard and create a new one.