Organization API
Auth
Confirm credentials, tenant identity, granted scopes, rate-limit policy, and key attribution.
Credential model
Organization API keys are organization-owned, server-to-server credentials. Send them in the Authorization header as a bearer token.
Use the key context endpoint to verify the organization, key prefix, granted scopes, IP allowlist state, rotation grace period, and rate-limit policy before running automation.
Scope checks
Every endpoint declares its required API scopes. A missing or invalid key returns 401; a valid key without the required scope returns 403.