Authentication

Send your key

Put the key in the Authorization header of every request:

Authorization: Bearer tn_live_AbCdEfGh...

Create a key

1. Open Account Settings → API keys in the dashboard. Workspace owners and team members can both create keys.
2. Click Create API key, enter a name you'll recognise (for example CRM sync), and choose when it expires: 30, 90 or 180 days, 1 year, or never.
3. Copy the key from the confirmation. It's shown only once -- TarangNow stores only a hash of it.

Each key has full read and write access to every endpoint in this reference, for its own workspace. A workspace can have up to 10 active keys.

Revoke a key

On the API keys page, click the delete icon next to the key. It stops working on its very next request. Revoke a key straight away if you think it has leaked, then create a new one. The page also shows when each key was last used.

Keep keys safe

• Store keys in environment variables or a secrets manager -- never in source control.
• Call the API only from your server. A key in a browser or mobile app can be read by anyone.
• Use a separate key per integration, so you can revoke one without breaking the others.
• Prefer keys that expire, and rotate them before they do.

Authentication errors