API ReferenceOverview
API keys
Authenticate every API request with a secret key in the Authorization header.
Create keys under Dashboard → Settings → API keys. Each key belongs to your account and can be revoked at any time.
Shell
curl https://api.riftip.com/v1/account \
-H "Authorization: Bearer rk_live_4f9c2b1e7a..."#Key types
| Prefix | Use |
|---|---|
rk_live_ | Production. Acts on your real account. |
rk_test_ | Test mode. Returns realistic data and never changes anything. |
#Scopes
When you create a key, choose what it can do:
| Scope | Allows |
|---|---|
read | Account, usage, IPs and allowlist — read only |
sub_users | Create, update and delete sub-users |
ips | Replace IPs and edit the allowlist |
A request outside a key's scopes returns 403 with code insufficient_scope.
Heads up
API keys are secrets. Keep them on your server, never in a browser or mobile app, and rotate a key immediately if it's exposed.