API Authentication

Authenticate public API requests with an organization API key.

Header

Authorization: Bearer cfk_your_api_key

Generate a Key

In Cloudflow, open Settings > API Access. API access is currently available to Business plan organizations in the app.

Organization Scope

API keys are scoped to the organization that generated the key. For API-key requests, Cloudflow determines the organization from the key. The organizationId query or body field is mainly useful for session-authenticated app requests and testing.

Security

Store API keys server-side. Do not commit them to source control, expose them in browser JavaScript, or share them in screenshots. Rotate or revoke keys when an integration owner changes.