---
title: Authorization
description: "To ensure the integrity and security of our data, all programmatic requests (except service *Open document*)must be authenticated using an **API Key**. --- ## Overview Our API uses a custom header-based authentication scheme. Every request to a protected endpoint must…"
url: "https://wiki.signatus.com/documentation/okdokument-api/2-1-authorization/"
updated: "2026-05-07"
category: 2. Core API services
---

# Authorization

To ensure the integrity and security of our data, all programmatic requests (except service *Open document*)must be authenticated using an **API Key**.

---

## Overview

Our API uses a custom header-based authentication scheme. Every request to a protected endpoint must include a valid API Key. This key identifies the calling application (the "Principal") and determines the scope of permissions granted to that caller.

## Implementing the API Key

To authenticate, you must include your key in the **x-api-key** header of every HTTP request.

Example of x-api-key: *9668716b6_1f40fc92da241684750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252a*