Authorization header.
Session bearer tokens
Use thetoken returned by an authorised sign-in (POST /v1/auth/sign-in). It is a short-lived JWT tied to an active user session. Requests use that user’s current organisation memberships and permissions.
Self-service API-key creation and management are not currently available in the application. Open your application to sign in through the supported user flow.
Keep session tokens private and pass the current token to SDKs through TX_AGENT_KIT_TOKEN. An expired or revoked session requires a new valid session token.