Authentication

Requests are authenticated with the Api-Key header.

Api-Key: abc123def456ghi789jkl012mno345pq

• Token value: 32-character string issued to your account.
• Required on every request. Missing or invalid token → 401.

Example

cURL

curl -H "Api-Key: $API_KEY" https://api.telesint.dev/v1/me/

Python

import os, requests

response = requests.get(
    "https://api.telesint.dev/v1/me/",
    headers={"Api-Key": os.environ["API_KEY"]},
    timeout=10,
)
response.raise_for_status()
print(response.json())

JavaScript

const res = await fetch('https://api.telesint.dev/v1/me/', {
  headers: { 'Api-Key': process.env.API_KEY },
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());

Rotating the token

Call POST /v1/me/reset-token with the current token, or rotate via the bot. Once processing succeeds, the old token is invalidated immediately.

Caution

The new token is returned only in the response body. Save it before updating clients. If the connection is lost after the request was sent and you did not receive the new token, issue another token through the bot.

Keeping the token safe

• Never commit the token to git. Use environment variables or a secret manager.
• Don’t ship the token into browser JavaScript — this API is server-to-server.