Authentication
How to authenticate requests to the Prezio API
Prezio API uses key-based authentication for all requests. We support both standard API keys and JSON Web Tokens (JWT). This guide explains how to obtain and use API keys effectively.
Authentication Flow
Obtain an API key
Get your unique API key through the Prezio customer dashboard or by contacting support.
Include the key in requests
Add your key to the Authorization header with prefix Token
for all API requests.
Access API resources
Make authenticated requests to any Prezio API endpoint you have permission to access.
Obtaining API Keys
Customer Dashboard
- Sign up and log in to the Prezio Customer Dashboard
- Navigate to the API section
- Find your API key with appropriate permissions
- Copy the key securely for use in your applications
Contact Support
For enterprise access or if you don’t have dashboard access, contact:
Include your account details and required access level.
Upon initial registration, users receive a sandbox API key valid for 30 days. Our team will contact you near the end of this period to discuss extending access based on your needs.
Using API Keys
Include your API key in the HTTP Authorization header with the prefix Token
:
Example Requests
Security Best Practices
API Key Storage
API Key Storage
- Use environment variables or secure vaults
- Never hardcode API keys in application code
- Keep API keys out of client-side code
- Use the same API key for both sandbox and production environments
API Key Lifecycle
API Key Lifecycle
- API keys do not expire automatically
- Rotate API keys periodically as a security measure
- Revoke compromised API keys immediately
- Consider using separate API keys for different applications if needed
Handling Authentication Errors
401 Unauthorized
The API key is invalid, expired, or missing. Verify you’re using the correct API key with the “Token” prefix.
403 Forbidden
Your API key lacks permission for the requested resource. Contact support to adjust permissions.
Authentication failures count toward your rate limits. Implement proper error handling to avoid excessive authentication attempts.
Environment-Specific Access
Use the same API key for both environments, but make requests to different base URLs:
Sandbox access is available to all registered users. Production access depends on your contract - contact our support team at support@prezio.eu to enable production access.
For questions regarding authentication or API key management, contact our support team at support@prezio.eu.