Skip to main content

Authentication

The Cobi API uses API key authentication to secure all endpoints. This guide will show you how to authenticate your requests.

Getting Your API Key

To get started with the Cobi API, you’ll need an API key:
  1. Contact the Cobi team at [email protected]
  2. Provide your organization details and use case
  3. You’ll receive a unique API key for your organization

Using Your API Key

Include your API key in the Authorization header of all requests:
curl -X POST https://api.hellocobi.com/v1/data/customers \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"records": [...]}'

Security Best Practices

  • Keep your API key secure and never share it publicly
  • Use environment variables to store your API key
  • Rotate your API key if you suspect it has been compromised
  • Use HTTPS for all API requests

Error Handling

If your API key is invalid or missing, you’ll receive a 401 Unauthorized response:
{
  "error": "Unauthorized",
  "message": "Invalid or missing API key"
}

Need Help?

If you’re having trouble with authentication or need a new API key, contact our support team at [email protected]