Authentication

The Solvimon API uses API keys to authenticate requests. Keys are environment-bound — test keys only work against test.api.solvimon.com and live keys only against api.solvimon.com.


Getting your API key

Sandbox: Keys are available immediately in Desk under Settings → API keys. No contract required.

Production: Live keys are provisioned when your account goes live.

Making authenticated requests

Pass your API key in the X-API-KEY header on every request:

$curl https://test.api.solvimon.com/v1/customers \
> -H "X-API-KEY: YOUR_API_KEY"

All requests must be made over HTTPS. Requests without the header, or with an invalid key, return 401 Unauthorized.

🚧 Keep keys secret

Do not commit API keys to source control or expose them in client-side code. Use environment variables: export SOLVIMON_API_KEY=your_key_here.

Environment isolation

Test and live environments are fully isolated. A test key used against api.solvimon.com will return 401, and vice versa. Data created in the test environment never appears in production.