Authentication - Refmatter

API keys

Send the key as a bearer token. One key belongs to one workspace. It can create and follow imports, read and edit references, download media, read usage, and call the public item and URL routes. It cannot reach another workspace or manage keys.

curl https://api.refmatter.com/v1/references \
  -H "Authorization: Bearer $REFMATTER_API_KEY"

Keys are shown once at creation and stored as a digest. Create and revoke keys on the API keys page of the Refmatter dashboard. Revocation is immediate. During early access, use Request access on refmatter.com to get a workspace.

Request ids

Send X-Request-Id to correlate a call with your own logs; it is echoed back on every response and included in error envelopes.