Authentication

The Karla API uses API Keys to authenticate requests in protected endpoints. Do not share your secret API key in publicly accessible areas such as your git repository, client-side code, etc...

All API requests must be made over HTTPS. Calls made over plain HTTP will be automatically redirected to HTTPS.

Authenticated Request

curl https://api.gokarla.io/v1/authenticated-endpoint \
  -u your-username:your-private-api-key

API Keys

Karla authenticates your API requests using your user's API key/s. If a request does not include a valid user and api key pair and the endpoint is protected, Karla returns a 400 (invalid request). If a request includes a deleted or expired key, Karla returns a 401 (authentication error).