Authentication

Create a key in Settings > Developers (owners and admins, Pro plan). Send it as a bearer token on every request:

curl https://api.threadkite.app/v1/locations \
  -H "Authorization: Bearer tk_live_..."

A key acts for your organisation, not for a person, and is shown once when you create it. Keep it on your server; never put it in a web page or app. Revoke a key at any time and it stops working at once.