Authorization

Most Headless API endpoints do not require authorization.

Auth may be required in cases where user data is returned, such as retrieving purchased Tiers.

When required, you'll need to use HTTP BASIC auth with the following details:

Username (Public Token)	Your Public Token (you can get this from https://creator.tebex.io/developers/api-keys)
Password (Private Key)	Your Private Key (you can get this from https://creator.tebex.io/developers/api-keys)

Your Public Token starts with 4 characters and a dash (ex. spk3-d515a30...)

The private key enables full access to your account. Follow best security practices to keep your keys safe. Don't embed any secret keys in your source code or client-side applications.

If your key is ever compromised, it can be rotated in your Tebex panel here.