Authentication
Authenticate to the Corinthian API with bearer API keys and environment-aware key prefixes.
Corinthian’s public API uses bearer API keys.
Header Format
curl https://api.conduitt.io/invoices \
-H "Authorization: Bearer ck_live_your_key"Key Prefixes
| Prefix | Environment |
|---|---|
ck_live_ | live |
ck_test_ | test |
Key Management Notes
- keep keys server-side only
- create keys with the scopes your integration actually needs
- rotate compromised keys immediately
- do not confuse API-key management with Settings → Developer, which is for OAuth applications
Common Failures
- missing
Authorizationheader - malformed bearer token
- revoked or environment-mismatched key
- insufficient scopes for the endpoint you are calling