Authentication

Bearer tokens, API key prefixes, and what a key can reach.

All requests require a Bearer token in the Authorization header.

Bearer token

Authorization: Bearer pc_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

API keys are prefixed with pc_live_.

Creating a key

Generate one from the dashboard's Developers settings, or via POST /api-keys — see API Key Endpoints. Key management itself needs a signed-in dashboard session: a key cannot mint or revoke another key.

Access scope: API keys can access campaign, asset, recipient, rendering, analytics, and webhook endpoints. Billing, profile, and account management are available only through the dashboard.