Authentication

API requests are authenticated with a bearer token. Send it in the Authorization header on every request. Keep tokens server-side: never ship them in browser code or commit them.

curl https://api.arsenly.com/v1/ping \
  -H "Authorization: Bearer YOUR_API_TOKEN"

Tokens

• Create and revoke tokens from your account settings (placeholder).
• A token carries the permissions of the account that created it.
• Rotate tokens periodically, and immediately if one may have leaked.

If a request is missing or presents an invalid token, the API responds with 401. See Errors for the full list.