Skip to content

Authentication

The REST API authenticates with workspace API keys. Keys act with your user’s permissions — anything you can see in Klaarin, the key can read.

Create a key

  1. Open your Klaarin profile and go to Connected Apps.
  2. Click Create API key, and name it after the system that will use it.
  3. Copy the key once — it is shown a single time, then stored hashed.

Use it

Send the key in the Authorization header of every request. Keys start with kl_live_.

Revoke

Revoke any key from the same Connected Apps list. Revocation is immediate; in-flight requests fail with 401 unauthorized.

Keys will be plan-gated

API keys will require a Medium or Pro workspace plan once API access ships. That gate isn’t wired up yet — there’s no enforcement today.

View example
Request
curl https://klaarin.com/api/v1/me \
  -H "Authorization: Bearer kl_live_9f2ac…"
401 without a valid key
{
  "error": {
    "code": "unauthorized",
    "message": "Missing or invalid Authorization header."
  }
}