Authentication
The REST API authenticates with workspace API keys. Keys act with your user’s permissions — anything you can see in Klaarin, the key can read.
Create a key
- Open your Klaarin profile and go to Connected Apps.
- Click Create API key, and name it after the system that will use it.
- Copy the key once — it is shown a single time, then stored hashed.
Use it
Send the key in the Authorization header of every request. Keys start with kl_live_.
Revoke
Revoke any key from the same Connected Apps list. Revocation is immediate; in-flight requests fail with 401 unauthorized.
Keys will be plan-gated
API keys will require a Medium or Pro workspace plan once API access ships. That gate isn’t wired up yet — there’s no enforcement today.
View example
Request
curl https://klaarin.com/api/v1/me \
-H "Authorization: Bearer kl_live_9f2ac…"401 without a valid key
{
"error": {
"code": "unauthorized",
"message": "Missing or invalid Authorization header."
}
}