Team API keys

All endpoints require Bearer token authentication. The simplest token is a team API key.

Create a key

Go to Dashboard → Integrations → API keys and create a key. Store it in your secret manager; it is shown once.

Use it

Send the key on every request:

curl "https://www.talentir.com/api/v1/team" \
  -H "Authorization: Bearer $TALENTIR_API_KEY"

API key access is scoped to the team that owns the key. To act on behalf of other teams (your customers), use OAuth 2.1 instead.

Scopes

API keys carry the default scopes: read and write payouts, webhooks, sessions, and team information and settings. Scopes are fixed when a key is created, so a key created before team:manage existed must be edited (or replaced) to receive it. The payouts:approve scope — creating payouts as pre-approved — is only granted to keys of teams with the payout.api_approve permission. See Scopes and permissions.

Good practice

• Keys are environment-specific: a sandbox key does not work in production.
• Rotate keys from the dashboard; deleting a key revokes it immediately.
• Never embed keys in client-side code. Calls belong on your server.