Skip to content
Sahaala Developer Docs

Authentication

Authentication

Sahaala uses API key Bearer tokens for all API requests. Keys are scoped and rotatable from your dashboard.

Obtaining an API Key

  1. Log in to your Sahaala dashboard
  2. Navigate to Settings → API Keys
  3. Click Generate New Key
  4. Copy and store your key securely — it is shown only once

Making Authenticated Requests

Pass your key as a Bearer token in the Authorization header:

Terminal window
Authorization: Bearer sk_live_xxxxxxxxxxxxxxxxxxxx

Key Scopes

ScopeDescription
invoices:readRead invoice data and status
invoices:writeCreate and submit invoices
reports:readAccess filing reports and summaries
webhooks:manageRegister and manage webhook endpoints

Environment Keys

Use separate keys for sandbox (sk_sandbox_*) and production (sk_live_*) environments. They are never interchangeable.

Full authentication reference will be published with the GA API docs release.